Skip to contentUnknown Forms vulnerabilities
- ninjaforms ninja forms, unknown ninja forms contact form – the drag and drop form builder for wordpress +1 moreNinja Forms < 3.6.10 - Admin+ Stored Cross-Site Scripting via ImportCVE-2021-250664.8 Medium
- ninjaforms ninja forms, unknown ninja forms contact form – the drag and drop form builder for wordpress +1 moreNinja Forms < 3.6.10 - Admin+ Stored Cross-Site ScriptingCVE-2021-250564.8 Medium
- mailerlite – signup forms (official), signup forms, unknown mailerlite – signup forms (official) +2 moreMailerLite < 1.5.4 - Reflected Cross-Site ScriptingCVE-2022-16046.1 Medium
- hubspot, unknown hubspot – crm, email marketing, live chat, forms & analytics +1 moreHubSpot < 8.8.15 - Contributor+ Blind SSRFCVE-2022-12398.8 High
- calderaforms caldera forms, unknown caldera forms – more than contact forms +1 moreCaldera Forms < 1.9.7 - Reflected Cross-Site ScriptingCVE-2022-08796.1 Medium
- cozmoslabs profile builder, unknown profile builder – user profile & user registration forms +1 moreProfile Builder < 3.6.8 - Admin+ Stored Cross-Site ScriptingCVE-2022-08844.8 Medium
- metagauss registrationmagic, unknown registrationmagic – custom registration forms, user registration and user login plugin +1 moreRegistrationMagic < 5.0.2.2 - Admin+ SQL InjectionCVE-2022-04207.2 High
- rednao smart forms, edgarrojas smart forms – when you need more than just a contact form +1 moreSmart Forms < 2.6.71 - Subscriber+ Form Data DownloadCVE-2022-01636.5 Medium
- wp user project user, unknown wp user – custom registration forms, login and user profile +1 moreWP User < 7.0 - Reflected Cross-Site ScriptingCVE-2021-250346.1 Medium
- wpeverest contact form, unknown contact forms – drag & drop contact form builder +1 moreContact Forms - Drag & Drop Contact Form Builder <= 1.0.5 - Admin+ Arbitrary System File ReadCVE-2021-246894.9 Medium
- cozmoslabs profile builder – user profile & user registration forms, profile builder +1 moreProfile Builder – User Profile & User Registration Forms <= 3.6.1 Reflected Cross-Site ScriptingCVE-2022-06536.1 Medium
- brevo newsletter, smtp, email marketing and subscribe forms by sendinblue, newsletter\, smtp\, email marketing and subscribe +1 moreNewsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.31 - Reflected Cross-Site ScriptingCVE-2021-248746.1 Medium
- crmperks contact form entries, unknown contact form entries – contact form 7, wpforms and more +1 moreContact Form Entries < 1.1.7 - Unauthenticated Stored Cross-Site ScriptingCVE-2021-25080EPSS 84.2%6.1 Medium
- crmperks contact form entries, unknown contact form entries – contact form 7, wpforms and more +1 moreContact Form Entries < 1.2.4 - Reflected Cross-Site ScriptingCVE-2021-250796.1 Medium
- unknown easy forms for mailchimpEasy Forms for Mailchimp < 6.8.6 - Reflected Cross-Site ScriptingCVE-2021-249856.1 Medium
- brevo newsletter, smtp, email marketing and subscribe forms by sendinblue, newsletter\, smtp\, email marketing and subscribe +1 moreNewsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.25 - Reflected XSSCVE-2021-249236.1 Medium
- metagauss registrationmagic, unknown registrationmagic – custom registration forms, user registration and user login plugin +1 moreRegistrationMagic < 5.0.1.6 - Admin+ SQL InjectionCVE-2021-24862Public exploitEPSS 72.7%7.2 High
- typebot, unknown typebot | build beautiful conversational forms +1 moreTypebot < 1.4.3 - Admin+ Stored Cross Site ScriptingCVE-2021-249024.8 Medium
- wpeverest everest forms, unknown contact form, drag and drop form builder for wordpress – everest forms +1 moreEverest Forms < 1.8.0 - Reflected Cross-Site ScriptingCVE-2021-249076.1 Medium
- calderaforms caldera forms, unknown caldera forms – more than contact forms +1 moreCaldera forms < 1.9.5 - Admin+ Stored Cross-Site ScriptingCVE-2021-248964.8 Medium
- basix nex-formsNEX-Forms < 8.4.3 - Stored Cross-Site Scripting via CSRFCVE-2021-247054.8 Medium
- reputeinfosystems contact form, survey & popup form plugin for wordpress – arforms form builder, contact form\, survey \& popup form plugin for wordpress - arforms form builder +1 moreARForms Form Builder < 1.5 - Admin+ Stored Cross Site ScriptingCVE-2021-247184.8 Medium
- ninjaforms ninja forms, unknown ninja forms contact form – the drag and drop form builder for wordpress +1 moreNinja Forms < 3.6.4 - Admin+ SQL InjectionCVE-2021-248897.2 High
- genetechsolutions pie register, unknown registration forms – user profile, content restriction, spam protection, payment gateways, invitation codes +1 morePie Register < 3.7.1.6 - Unauthenticated SQL InjectionCVE-2021-247319.8 Critical
- genetechsolutions pie register, unknown registration forms – user profile, content restriction, spam protection, payment gateways, invitation codes +1 morePie Register < 3.7.1.6 - Unauthenticated Arbitrary LoginCVE-2021-24647Public exploit8.1 High
- wow-company wow forms, unknown wow forms – create any form with custom style +1 moreWow Forms <= 3.1.3 - Admin+ SQL InjectionCVE-2021-246287.2 High
- strategy11 formidable form builder, unknown formidable form builder – contact form, survey & quiz forms plugin for wordpress +1 moreFormidable Form Builder < 4.09.05 - Unauthenticated Stored Cross-Site ScriptingCVE-2021-24884Public exploit9.6 Critical
- cimatti contact forms, cimatti consulting wordpress contact forms by cimatti +1 moreWordPress Contact Forms by Cimatti < 1.4.12 - Admin+ Stored Cross-Site ScriptingCVE-2021-247444.8 Medium
- strategy11 formidable form builder, unknown formidable form builder – contact form, survey & quiz forms plugin for wordpress +1 moreFormidable Form Builder < 5.0.07 - Admin+ Stored Cross-Site ScriptingCVE-2021-246084.8 Medium
- ninjaforms contact form, unknown ninja forms contact form – the drag and drop form builder for wordpress +1 moreNinjaForms < 3.5.8.2 - Admin+ Stored Cross-Site ScriptingCVE-2021-243814.8 Medium
- planso forms, unknown planso forms +1 morePlanSo Forms <= 2.6.3 - Authenticated Stored Cross-Site ScriptingCVE-2021-245164.8 Medium
- ninjaforms ninja formsNinja Forms <= 3.5.7 Sensitive Information DisclosureCVE-2021-346476.5 Medium
- ninjaforms ninja formsNinja Forms <= 3.5.7 Unprotected REST-API to Email InjectionCVE-2021-346486.4 Medium
- itservicejung youforms-free-for-copecart, unknown youforms for wordpress – creating forms for copecart +1 moreyouForms for WordPress <= 1.0.5 - Authenticated Stored Cross-Site ScriptingCVE-2021-245964.8 Medium
- trumani stop spammers, unknown stop spammers security | block spam users, comments, forms +1 moreStop Spammers Security < 2021.18 - Authenticated Stored XSSCVE-2021-245175.4 Medium
- muneeb form builder | create responsive contact forms, web-settler form builder +1 moreForm Builder < 1.9.8.4 - Authenticated Stored Cross-Site ScriptingCVE-2021-245135.4 Medium
- made i.t. formsForms < 1.12.3 - Authenticated Stored Cross-Site Scripting (XSS)CVE-2021-245055.4 Medium
- genetechsolutions pie register, unknown pie register – user registration forms. invitation based registrations, custom login, payments +1 morePie Register < 3.7.0.1 - Reflected Cross-Site Scripting (XSS)CVE-2021-242396.1 Medium
- ninjaforms ninja forms, unknown ninja forms contact form – the drag and drop form builder for wordpress +1 moreNinja Forms < 3.4.34 - CSRF to OAuth Service DisconnectionCVE-2021-241665.4 Medium
- ninjaforms ninja forms, unknown ninja forms contact form – the drag and drop form builder for wordpress +1 moreNinja Forms < 3.4.34 - Administrator Open RedirectCVE-2021-241656.1 Medium
- ninjaforms ninja forms, unknown ninja forms contact form – the drag and drop form builder for wordpress +1 moreNinja Forms < 3.4.34.1 - Authenticated OAuth Connection Key DisclosureCVE-2021-241644.3 Medium
- ninjaforms ninja forms, unknown ninja forms contact form – the drag and drop form builder for wordpress +1 moreNinja Forms < 3.4.34 - Authenticated SendWP Plugin Installation and Client Secret Key DisclosureCVE-2021-241638.8 High
- constant contact forms, constantcontact constant contact forms +1 moreConstant Contact Forms < 1.8.8 - Multiple Authenticated Stored XSSCVE-2021-241344.8 Medium
- rednao smart formsCross-site request forgery (CSRF) vulnerability in Smart Forms 2.6.15 and earlier allows remote...CVE-2019-59248.8 High