Unknown Sureforms vulnerabilities

• brainstorm force sureforms WordPress SureForms plugin <= 2.12.9 - Broken Access Control vulnerability CVE-2026-116387 5.3 MediumOctober 29, 2026
• brainstorm force sureforms WordPress SureForms plugin <= 2.12.9 - Content Injection vulnerability CVE-2026-116402 5.3 MediumOctober 29, 2026
• brainstorm force sureforms WordPress SureForms plugin <= 2.12.7 - Cross Site Scripting (XSS) vulnerability CVE-2026-108495 6.5 MediumOctober 13, 2026
• brainstorm force sureforms WordPress SureForms plugin <= 2.12.5 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-85308 5.3 MediumSeptember 3, 2026
• sureforms SureForms contains an uncontrolled resource consumption vulnerability CVE-2026-19500 Public exploit 7.5 HighAugust 18, 2026
• sureforms CVE-2026-19501 CVE-2026-19501 Public exploit 8.8 HighAugust 18, 2026
• unknown sureforms SureForms < 2.11.1 - Unauthenticated Payment Amount Bypass CVE-2026-11567 5.9 MediumJuly 14, 2026
• unknown sureforms SureForms < 1.9.1 - Admin+ Stored XSS CVE-2025-8282 3.5 LowSeptember 23, 2025
• brainstormforce sureforms SureForms < 1.7.2 - Reflected XSS CVE-2025-5921 5.8 MediumAugust 1, 2025
• brainstormforce sureforms SureForms < 1.4.4 - Admin+ Stored XSS CVE-2025-3514 3.5 LowMay 2, 2025
• brainstormforce sureforms SureForms < 1.4.4 - Admin+ Stored XSS CVE-2025-3513 3.5 LowMay 2, 2025
• brainstormforce sureforms SureForms < 1.4.4 - Contributor+ Settings Update CVE-2025-3471 4.9 MediumApril 30, 2025