Plugin icon

Smart Forms – when you need more than just a contact form

smart-forms

Vulnerabilities:

11

Last Updated:

May 4, 2026

Active Installs:

6000

Published
Title
Fixed in
CVSS
Published
2026-02-13
Title
Smart Forms < 2.6.101 - Missing Authorization to Authenticated (Subscriber+) Campaign Data Exposure
Fixed in
Fixed in 2.6.101
CVSS
4.3 (medium)
Published
2025-05-23
Title
Smart Forms < 2.6.99 - Authenticated (Admin+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.6.99
CVSS
4.4 (medium)
Published
2024-04-25
Title
Smart Forms < 2.6.92 - Missing Authorization to Notice Dismissal
Fixed in
Fixed in 2.6.92
CVSS
4.3 (medium)
Published
2024-04-08
Title
Smart Forms < 2.6.96 - Admin+ Stored XSS
Fixed in
Fixed in 2.6.96
CVSS
3.5 (low)
Published
2024-03-25
Title
Smart Forms < 2.6.94 - Edit Entries via CSRF
Fixed in
Fixed in 2.6.94
CVSS
4.3 (medium)
Published
2024-03-25
Title
Smart Forms < 2.6.94 - Subscriber+ Edit Entries via Broken Access Control
Fixed in
Fixed in 2.6.94
CVSS
4.3 (medium)
Published
2024-02-02
Title
Smart Forms < 2.6.87 - Subscriber+ Arbitrary Entry Deletion
Fixed in
Fixed in 2.6.87
CVSS
6.5 (medium)
Published
2023-12-07
Title
Smart Forms < 2.6.85 - Subscriber+ Arbitrary Options Update
Fixed in
Fixed in 2.6.85
CVSS
8.8 (high)
Published
2022-02-14
Title
Smart Forms < 2.6.71 - Subscriber+ Form Data Download
Fixed in
Fixed in 2.6.71
CVSS
6.5 (medium)
Published
2019-02-28
Title
Smart Forms < 2.6.16 - Cross-Site Request Forgery (CSRF)
Fixed in
Fixed in 2.6.16
CVSS
8.8 (high)
Published
2014-10-13
Title
Smart Forms 2.1.0 - Cross-Site Scripting (XSS)
Fixed in
Fixed in 2.1.1
CVSS
n/a