Umbraco Forms vulnerabilities

• umbraco umbraco.engage.forms Umbraco.Engage.Forms Allows Unauthorized Access to Multiple API Endpoints CVE-2026-27449 Fix available 7.5 HighFebruary 26, 2026
• umbraco forms, umbraco.forms.issues +1 more Umbraco.Forms has path traversal and file enumeration vulnerability in Linux/Mac CVE-2026-24687 Fix available 6.0 MediumJanuary 29, 2026
• made i.t. forms UmbracoForms Vulnerable to Remote Code Execution via Untrusted WSDL Compilation in Dynamic SOAP Client Generation CVE-2025-68924 7.5 HighJanuary 13, 2026
• umbraco forms, umbraco.forms.issues +1 more Umbraco.Forms has HTML injection vulnerability in 'Send email' workflow CVE-2025-47280 Fix available 2.3 LowMay 13, 2025
• umbraco forms, umbraco.forms.issues +1 more Short and Long Answer Fields Are Not Validated Server-Side For Maximum Length in Umbraco.Forms CVE-2025-23041 Fix available 5.8 MediumJanuary 14, 2025
• umbraco forms, umbraco.forms.issues +1 more Stored Cross-site Scripting on Components of Umbraco Forms CVE-2024-35239 Fix available 2.7 LowMay 28, 2024
• umbraco forms File upload vulnerability in Umbraco Forms v.8.7.0 allows unauthenticated attackers to execute... CVE-2021-33224 9.8 CriticalFebruary 24, 2023
• umbraco forms A security issue in Umbraco Forms 4.0.0 to and including 8.7.5 could lead to a remote code... CVE-2021-37334 9.8 CriticalAugust 25, 2021
• umbraco forms Insecure Defaults CVE-2020-7685 5.4 MediumJuly 28, 2020