Plugin icon

HTML Forms – Simple WordPress Forms Plugin

html-forms

Vulnerabilities:

9

Last Updated:

March 11, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2025-12-16
Title
HTML Forms – Simple WordPress Forms Plugin < 1.6.1 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 1.6.1
CVSS
6.1 (medium)
Published
2025-11-07
Title
HTML Forms < 1.5.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.5.6
CVSS
4.4 (medium)
Published
2025-04-22
Title
HTML Forms < 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.5.3
CVSS
6.4 (medium)
Published
2025-04-01
Title
HTML Forms < 1.5.2 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 1.5.2
CVSS
7.2 (high)
Published
2024-12-18
Title
HTML Forms < 1.4.2 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.4.2
CVSS
6.1 (medium)
Published
2024-07-10
Title
HTML Forms – Simple WordPress Forms Plugin < 1.3.34 - Bulk Delete via CSRF
Fixed in
Fixed in 1.3.34
CVSS
4.3 (medium)
Published
2024-07-01
Title
HTML Forms < 1.3.33 - Admin+ Stored XSS
Fixed in
Fixed in 1.3.33
CVSS
3.5 (low)
Published
2023-12-21
Title
HTML Forms < 1.3.30 - Admin+ Stored XSS
Fixed in
Fixed in 1.3.30
CVSS
3.5 (low)
Published
2022-11-07
Title
HTML Forms < 1.3.25 - Admin+ SQLi
Fixed in
Fixed in 1.3.25
CVSS
6.8 (medium)