Skip to contentUnknown Forms vulnerabilities
- brainstormforce sureformsSureForms < 1.4.4 - Admin+ Stored XSSCVE-2025-35143.5 Low
- brainstormforce sureformsSureForms < 1.4.4 - Admin+ Stored XSSCVE-2025-35133.5 Low
- brainstormforce sureformsSureForms < 1.4.4 - Contributor+ Settings UpdateCVE-2025-34714.9 Medium
- fromdoppler doppler formsWordPress Doppler Forms plugin <= 2.4.6 - Broken Access Control vulnerabilityCVE-2025-326207.1 High
- fromdoppler doppler formsWordPress Doppler Forms plugin <= 2.5.1 - CSRF to Stored XSS vulnerabilityCVE-2025-326677.1 High
- fromdoppler doppler formsWordPress Doppler Forms plugin <= 2.5.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-321656.5 Medium
- unknown contact form & smtp plugin for wordpress by pirateforms, wpforms contact form +1 moreContact Form & SMTP Plugin for WordPress by PirateForms < 2.6.0 - Admin+ Stored XSSCVE-2024-112736.1 Medium
- unknown contact form & smtp plugin for wordpress by pirateforms, wpforms pirate forms +1 moreContact Form & SMTP Plugin for WordPress by PirateForms < 2.6.0 - Admin+ Stored XSSCVE-2024-112726.1 Medium
- infusionsoft keap official opt-in forms, keap official opt in forms +1 moreKeap Official Opt-in Forms <= 2.0.1 - Unauthenticated Limited Local File InclusionCVE-2024-137259.8 Critical
- kainex wise formsWise Forms <= 1.2.0 - Unauthenticated Stored XSSCVE-2024-136036.1 Medium
- unknown forminator formsForminator < 1.38.3 - Admin+ Stored XSSCVE-2024-70524.8 Medium
- unknown everest formsEverest Forms < 3.0.8.1 - Admin+ Stored XSSCVE-2024-131253.5 Low
- smub contact form & smtp plugin for wordpress by pirateformsContact Form & SMTP Plugin for WordPress by PirateForms <= 2.6.0 - Unauthenticated Arbitrary Shortcode ExecutionCVE-2024-134537.3 High
- syed balkhi wpformsWPForms < 1.9.2.3 - Admin+ Stored XSSCVE-2024-112234.7 Medium
- strategy11 formidable formsWordPress Formidable Forms plugin <= 5.5.4 - Broken Access Control vulnerabilityCVE-2022-458064.3 Medium
- edgarrojas smart formsWordPress Smart Forms plugin <= 2.6.84 - Authenticated Arbitrary Options Change VulnerabilityCVE-2023-498568.1 High
- fluentforms contact form, unknown fluent forms +1 moreContact Form Plugin by Fluent Forms < 5.2.1 - Admin+ Stored XSSCVE-2024-96516.1 Medium
- fatcatapps campaign monitor forms by optin catCampaign Monitor Forms by Optin Cat <= 2.5.7 - Reflected Cross-Site ScriptingCVE-2024-113266.1 Medium
- unknown everest formsEverest Forms < 3.0.4.2 - Admin+ Stored XSSCVE-2024-104714.8 Medium
- syed balkhi wpformsWPForms < 1.9.1.6 - Admin+ Stored XSSCVE-2024-70563.5 Low
- strategy11 formidable formsFormidable Forms < 6.14.1 - Admin+ Stored XSSCVE-2024-97684.8 Medium
- kevin stover ninja formsWordPress Ninja Forms – The Contact Form Builder That Grows With You plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-505145.9 Medium
- kevin stover ninja formsWordPress Ninja Forms – The Contact Form Builder That Grows With You plugin <= 3.8.16 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-505155.9 Medium
- keap official opt-in forms, unknown keap official opt-in forms +1 moreWordPress Keap Official Opt-in Forms plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-476426.5 Medium
- ninjaforms ninja formsWordPress Ninja Forms plugin <= 3.8.11 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-439995.9 Medium
- happyformsWordPress Happyforms plugin <= 1.26.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-440636.5 Medium
- project caruso flaming formsFlaming Forms <= 1.0.1 - Reflected XSSCVE-2024-76926.1 Medium
- project caruso flaming formsFlaming Forms <= 1.0.1 - Unauthenticated Stored XSSCVE-2024-76916.1 Medium
- ninjaforms ninja formsNinja Forms 3.8.6-3.8.10 - Reflected XSSCVE-2024-73546.1 Medium
- ninjaforms ninja formsWordPress Ninja Forms plugin <= 3.8.6 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-396285.4 Medium
- htmlforms html formsHTML Forms – Simple WordPress Forms Plugin < 1.3.34 - Bulk Delete via CSRFCVE-2024-64126.5 Medium
- htmlforms html formsHTML Forms < 1.3.33 - Admin+ Stored XSSCVE-2024-62434.8 Medium
- ninjaforms ninja formsWordPress Ninja Forms plugin <= 3.8.4 - Subscriber+ Arbitrary Shortcode Execution vulnerabilityCVE-2024-379345.4 Medium
- ninjaforma ninja formsWordPress Ninja Forms plugin <= 3.6.25 - Subscriber+ Broken Access Control vulnerabilityCVE-2023-383937.6 High
- ninjaforms ninja formsWordPress Ninja Forms plugin <= 3.6.25 - Contributor+ Broken Access Control vulnerabilityCVE-2023-383867.6 High
- reputeinfosystems arforms, unknown arforms - premium wordpress form builder plugin, reputeinfosystems arforms form builder +2 moreArforms < 6.4.1 - Reflected XSSCVE-2024-04276.3 Medium
- happyformsWordPress Happyforms plugin <= 1.25.10 - Broken Access Control vulnerabilityCVE-2024-235215.3 Medium
- code parrots easy forms for mailchimpWordPress Easy Forms for Mailchimp plugin <= 6.9.0 - Broken Access Control vulnerabilityCVE-2024-357425.3 Medium
- reputeinfosystems arforms, unknown arforms - premium wordpress form builder plugin, reputeinfosystems arforms form builder +2 moreArForms < 6.6 - Admin+ Stored XSSCVE-2024-46214.8 Medium
- reputeinfosystems arforms, unknown arforms - premium wordpress form builder plugin, reputeinfosystems arforms form builder +2 moreArForms < 6.6 - Unauthenticated RCECVE-2024-46209.8 Critical
- code parrots easy forms for mailchimpWordPress Easy Forms for Mailchimp plugin <= 6.9.0 - Sensitive Data Exposure via Log File vulnerabilityCVE-2024-250957.5 High
- strategy11 formidable formsWordPress Formidable Forms plugin <= 6.7 - Content Injection vulnerabilityCVE-2024-235225.3 Medium
- rednao smart formsWordPress Smart Forms plugin <= 2.6.91 - Broken Access Control vulnerabilityCVE-2024-335934.3 Medium
- rednao smart formsSmart Forms < 2.6.96 - Admin+ Stored XSSCVE-2024-19055.9 Medium
- ninjaforms ninja forms, saturday drive ninja forms contact form +1 moreWordPress Ninja Forms Plugin <= 3.6.24 is vulnerable to Arbitrary File DeletionCVE-2023-365056.8 Medium
- rednao smart formsSmart Forms < 2.6.94 - Subscriber+ Edit Entries via Broken Access ControlCVE-2024-13076.5 Medium
- rednao smart formsSmart Forms < 2.6.94 - Edit Entries via CSRFCVE-2024-13065.4 Medium
- ninjaforms ninja formsCross-site request forgery (CSRF) vulnerability exists in Ninja Forms prior to 3.4.31. If a...CVE-2024-255728.8 High
- ninjaforms ninja formsNinja Forms prior to 3.8.1 contains a cross-site scripting vulnerability in submit processing. If...CVE-2024-260195.4 Medium
- ninjaforms ninja formsNinja Forms prior to 3.8.1 contains a cross-site scripting vulnerability in custom fields for...CVE-2024-292206.1 Medium
- Show moreLoading…