Plugin icon

Advanced Form Integration — Connect Forms to 300+ Apps

advanced-form-integration

Vulnerabilities:

13

Last Updated:

October 3, 2026

Active Installs:

9000

Published
Title
Fixed in
CVSS
Published
2026-07-27
Title
Advanced Form Integration < 2.7.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary MailUp OAuth Token Overwrite via auth_redirect() Function
Fixed in
Fixed in 2.7.0
CVSS
4.3 (medium)
Published
2026-06-10
Title
Advanced Form Integration < 2.1.1 - Unauthenticated Privilege Escalation via Breakdance Form Role Mapping
Fixed in
Fixed in 2.1.1
CVSS
8.1 (high)
Published
2026-04-29
Title
AFI – The Easiest Integration Plugin < 1.127.0 - Missing Authorization
Fixed in
Fixed in 1.127.0
CVSS
4.3 (medium)
Published
2025-03-03
Title
AFI < 1.100.0 - Admin+ Stored XSS
Fixed in
Fixed in 1.100.0
CVSS
3.5 (low)
Published
2025-03-03
Title
AFI < 1.100.0 - Admin+ Stored XSS
Fixed in
Fixed in 1.100.0
CVSS
3.5 (low)
Published
2025-01-03
Title
Advanced Form Integration < 1.97.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.97.0
CVSS
4.4 (medium)
Published
2024-11-12
Title
AFI – The Easiest Integration Plugin < 1.92.1 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.92.1
CVSS
6.1 (medium)
Published
2024-08-16
Title
AFI – The Easiest Integration Plugin < 1.89.6 - Cross-Site Request Forgery
Fixed in
Fixed in 1.89.6
CVSS
4.3 (medium)
Published
2024-03-19
Title
Advanced Form Integration – Connect WooCommerce and Contact Form 7 to Google Sheets and other platforms < 1.82.6 - SQL Injection to Reflected Cross-Site Scripting via integration_id
Fixed in
Fixed in 1.82.6
CVSS
6.1 (medium)
Published
2023-12-21
Title
Advanced Form Integration < 1.76.0 - Authenticated(Administrator+) SQL Injection
Fixed in
Fixed in 1.76.0
CVSS
6.6 (medium)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.69.1
CVSS
6.1 (medium)
Published
2023-01-27
Title
Advanced Form Integration < 1.63.0 - Admin+ Stored XSS
Fixed in
Fixed in 1.63.0
CVSS
3.5 (low)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 1.49.0
CVSS
4.3 (medium)