Plugin icon

Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms

happyforms

Vulnerabilities:

6

Last Updated:

May 27, 2026

Active Installs:

20000

Published
Title
Fixed in
CVSS
Published
2026-06-04
Title
Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms < 1.26.14 - Unauthenticated PHP Object Injection
Fixed in
Fixed in 1.26.14
CVSS
8.1 (high)
Published
2024-10-16
Title
Happyforms < 1.26.3 - Admin+ Stored XSS
Fixed in
Fixed in 1.26.3
CVSS
3.5 (low)
Published
2024-08-29
Title
Happyforms < 1.26.1 - Authenticated (Author+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.26.1
CVSS
6.4 (medium)
Published
2024-01-31
Title
Happyforms < 1.25.11 - Missing Authorization
Fixed in
Fixed in 1.25.11
CVSS
5.3 (medium)
Published
2023-11-27
Title
Happyforms < 1.25.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.25.10
CVSS
5.8 (medium)
Published
2023-01-13
Title
Happyforms < 1.22.0 - Contributor+ Stored XSS
Fixed in
Fixed in 1.22.0
CVSS
6.8 (medium)