Plugin icon

Form Vibes – Save Contact Form 7 & Elementor Form Entries to Database

form-vibes

Vulnerabilities:

8

Last Updated:

July 8, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-07-16
Title
Form Vibes – Save Contact Form 7 & Elementor Form Entries to Database < 1.5.3 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 1.5.3
CVSS
7.2 (high)
Published
2026-07-10
Title
Form Vibes < 1.5.3 - Unauthenticated Stored Cross-Site Scripting via Contact Form 7 Form Field
Fixed in
Fixed in 1.5.3
CVSS
7.2 (high)
Published
2026-01-05
Title
Form Vibes – Database Manager for Forms < 1.5 - Authenticated (Admin+) SQL Injection
Fixed in
Fixed in 1.5
CVSS
4.9 (medium)
Published
2024-09-04
Title
Form Vibes – Database Manager for Forms < 1.4.13 - Missing Authorization in Multiple Functions
Fixed in
Fixed in 1.4.13
CVSS
5.4 (medium)
Published
2024-07-11
Title
Form Vibes < 1.4.11 - Authenticated (Subscriber+) SQL Injection via fv_export_data
Fixed in
Fixed in 1.4.11
CVSS
8.8 (high)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.4.9
CVSS
6.1 (medium)
Published
2022-11-08
Title
Form Vibes < 1.4.6 - Admin+ SQLi
Fixed in
Fixed in 1.4.6
CVSS
6.8 (medium)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 1.4.3
CVSS
4.3 (medium)