Skip to contentUnknown Forms vulnerabilities
- rednao smart formsSmart Forms < 2.6.87 - Subscriber+ Arbitrary Entry DeletionCVE-2023-72036.1 Medium
- keap official opt-in forms, unknown keap official opt-in forms +1 moreWordPress Keap Official Opt-in Forms Plugin <= 1.0.11 is vulnerable to Cross Site Scripting (XSS)CVE-2023-521926.5 Medium
- strategy11 formidable formsFormidable Forms < 6.2 - Unauthenticated PHP Object InjectionCVE-2023-1405Public exploit7.5 High
- super-forms super forms, unknown super forms - drag & drop form builder +1 moreSuperforms < 6.0.4 - Reflected Cross-Site ScriptingCVE-2022-04026.1 Medium
- unknown easy forms for mailchimpEasy Forms for Mailchimp <= 6.8.10 - Admin+ Stored Cross-Site ScriptingCVE-2023-49254.8 Medium
- keap official opt-in forms, unknown keap official opt-in forms +1 moreKeap Official Opt-in Forms <= 1.0.11 - Admin+ Stored XSSCVE-2023-69414.8 Medium
- bannersky bsk forms blacklistBSK Forms Blacklist < 3.7 - Admin+ Stored Cross-Site ScriptingCVE-2023-59804.8 Medium
- ninjaforms ninja forms, saturday drive ninja forms contact form – the drag and drop form builder for wordpress +1 moreWordPress Ninja Forms Plugin <= 3.6.25 is vulnerable to Denial of Service AttackCVE-2023-359095.3 Medium
- atomicwebstrategy woocommerce ninja forms product add-onsWooCommerce Ninja Forms Product Add-ons < 1.7.1 - Unauthenticated Arbitrary File UploadCVE-2023-56019.8 Critical
- ninjaforms ninja forms, unknown ninja forms contact form +1 moreNinja Forms < 3.6.34 - Admin+ Stored XSSCVE-2023-55304.8 Medium
- unknown campaign monitor forms by optin cat, fatcatapps campaign monitor optin cat +1 moreCampaign Monitor Forms < 2.5.6 - Subscriber+ Arbitrary Options UpdateCVE-2023-50988.1 High
- ninjaforms ninja forms contact formNinja Forms < 3.6.26 - Admin+ Stored HTML InjectionCVE-2023-41094.8 Medium
- unknown easy forms for mailchimpWordPress Easy Forms for Mailchimp Plugin <= 6.8.8 is vulnerable to Cross Site Scripting (XSS)CVE-2023-239005.8 Medium
- addify abandoned cart recovery, advanced free gifts, checkout fields manager +10 more +12 moreMultiple Plugins from Addify - Multiple CSRFCVE-2022-48886.5 Medium
- ninjaforms ninja forms, saturday drive ninja forms contact form +1 moreWordPress Ninja Forms Plugin <= 3.6.25 is vulnerable to Cross Site Scripting (XSS)CVE-2023-37979Public exploit7.1 High
- mediaburst gravity forms, unknown gravityforms +1 moreGravity Forms < 2.7.5 - Reflected XSSCVE-2023-27016.1 Medium
- basix nex-formsNEX-Forms < 8.4.4 - Authenticated Stored XSSCVE-2023-04395.4 Medium
- gsheetconnector caldera forms google sheets connectorCaldera Forms Google Sheets Connector < 1.3 - Access Code Update via CSRFCVE-2023-23308.8 High
- gsheetconnector wpforms google sheet connector, unknown gsheetconnector-wpforms-pro +1 moreWPForms Google Sheet Connector < 3.4.6 - Reflected XSSCVE-2023-23216.1 Medium
- gsheetconnector elementor forms google sheet connector, unknown gsheetconnector-for-elementor-forms-pro +1 moreElementor Forms Google Sheet Connector < 1.0.7 - Reflected XSSCVE-2023-23246.1 Medium
- gsheetconnector ninja forms google sheet connector, unknown gsheetconnector-ninja-forms-pro +1 moreNinja Forms Google Sheet Connector < 1.2.7 - Reflected XSSCVE-2023-23336.1 Medium
- unknown gravity forms google sheet connector, gsheetconnector-gravityforms-pro, gsheetconnector gravity forms google sheets connector +2 moreGravity Forms Google Sheet Connector < 1.3.5 - Access Code Update via CSRFCVE-2023-23266.5 Medium
- strategy11 formidable formsFormidable Forms < 6.3.1 - Subscriber+ Remote Code ExecutionCVE-2023-2877Public exploitEPSS 22.5%8.8 High
- unknown easy forms for mailchimpEasy Forms for MailChimp < 6.8.9 - Admin+ Stored XSSCVE-2023-13234.8 Medium
- wpforms contact form, smub contact form & smtp plugin for wordpress by pirateforms +1 moreContact Form & SMTP Plugin by PirateForms <= 2.5.1 - Unauthenticated HTML injectionCVE-2019-251457.2 High
- brevo newsletter, smtp, email marketing and subscribe forms by sendinblue, newsletter\, smtp\, email marketing and subscribe +1 moreNewsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.61 - Reflected XSSCVE-2023-24726.1 Medium
- trumani stop spammers, unknown stop spammers security | block spam users, comments, forms +1 moreStop Spammers Security < 2023 - Admin+ Stored XSSCVE-2023-24894.8 Medium
- trumani stop spammers, unknown stop spammers security | block spam users, comments, forms +1 moreStop Spammers Security < 2023 - Reflected XSSCVE-2023-24886.1 Medium
- unknown easy forms for mailchimpEasy Forms for Mailchimp < 6.8.9 - Reflected XSSCVE-2023-25186.1 Medium
- ninjaforms ninja forms, unknown ninja forms contact form +1 moreNinja Forms < 3.6.22 - Reflected XSSCVE-2023-18356.1 Medium
- basix nex-formsNEX-Forms < 8.4 - Admin+ SQL InjectionCVE-2023-2114Public exploitEPSS 44.9%7.2 High
- unknown easy forms for mailchimpEasy Forms for MailChimp < 6.8.8 - Reflected XSSCVE-2023-13246.1 Medium
- unknown easy forms for mailchimpEasy Forms for MailChimp < 6.8.7 - Contributor+ Stored XSSCVE-2023-13255.4 Medium
- basix nex-formsNEX-Forms < 8.3.3 - Contributor+ Stored XSSCVE-2023-02725.4 Medium
- unknown formidable forms, strategy11 formidable form builder +1 moreFormidable Forms < 6.1 - IP SpoofingCVE-2023-08166.5 Medium
- strategy11 form builder team formidable forms, strategy11 formidable form builder +1 moreWordPress Formidable Forms Plugin <= 5.5.6 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-244197.1 High
- genetechsolutions pie register, unknown registration forms +1 morePie Register < 3.8.2.3 - Open RedirectCVE-2023-0552EPSS 24.3%5.4 Medium
- happyforms, happyforms form builder to get in touch with visitors, grow your email list and collect payments — happyforms +1 moreHappyforms < 1.22.0 - Contributor+ Stored XSSCVE-2023-00965.4 Medium
- trumani stop spammers, unknown stop spammers security | block spam users, comments, forms +1 moreStop Spammers Security < 2022.6 - Unauthenticated PHP Object InjectionCVE-2022-4120EPSS 18.1%9.8 Critical
- david de boer paytium: mollie payment forms & donations, paytium +1 morePaytium < 4.3.7 - Admin+ Stored XSSCVE-2022-40424.8 Medium
- genetechsolutions pie register, unknown registration forms +1 morePie Register < 3.8.1.3 - Unauthenticated Arbitrary User DeletionCVE-2022-40246.5 Medium
- google forms project forms, unknown google forms +1 moreGoogle Forms <= 0.95 - Admin+ Stored XSSCVE-2022-38344.8 Medium
- link software llc html formsHTML Forms < 1.3.25 - Admin+ SQLiCVE-2022-3689Public exploit7.2 High
- unknown wpforms pro, wpforms pro +1 moreWPForms Pro < 1.7.7 - CSV InjectionCVE-2022-35749.8 Critical
- fluentforms contact form, contact form - wpmanageninja llc form plugin – fastest contact form builder plugin for wordpress by fluent forms, unknown contact form plugin – fastest contact form builder plugin for wordpress by fluent forms +2 moreFluentForm < 4.3.13 - CSV InjectionCVE-2022-34639.8 Critical
- ninjaforms ninja forms, unknown ninja forms contact form – the drag and drop form builder for wordpress +1 moreNinjaForms < 3.6.13 - Admin+ PHP Objection InjectionCVE-2022-29037.2 High
- themehunk wp popup builder, unknown wp popup builder – popup forms , marketing popup & newsletter +1 moreWP Popup Builder < 1.3.0 - Subscriber+ Arbitrary Popup DeletionCVE-2022-24054.3 Medium
- themehunk wp popup builder, unknown wp popup builder – popup forms , marketing popup & newsletter +1 moreWP Popup Builder < 1.2.9 - Reflected Cross-Site ScriptingCVE-2022-24046.1 Medium
- basixonline nex-forms, unknown nex-forms – ultimate form builder – contact forms and much more +1 moreNEX-Forms < 7.9.7 - Authenticated SQLiCVE-2022-3142Public exploitEPSS 15.6%8.8 High
- weformspro weforms, boldgrid weforms – easy drag & drop contact form builder for wordpress +1 moreweForms < 1.6.14 - Admin+ Stored Cross-Site ScriptingCVE-2022-23954.8 Medium
- Show moreLoading…