WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
forms-by-made-it
Published
2025-08-13
Title
Forms <= 2.9.0 - Authenticated (Contributor+) Arbitrary File Upload
Slug
forms-for-campaign-monitor
Published
2023-11-27
Title
Campaign Monitor for WordPress < 2.8.14 - Reflected Cross-Site Scripting
Slug
forms-for-campaign-monitor
Published
2024-07-26
Title
Campaign Monitor for WordPress < 2.8.16 - Unauthenticated Full Path Disclosure
Slug
forms-for-campaign-monitor
Published
2026-01-08
Title
Campaign Monitor for WordPress <= 2.9.0 - Missing Authorization
Slug
forms-for-divi
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
forms-gutenberg
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
forms-gutenberg
Published
2024-07-08
Title
Gutenberg Forms <= 2.2.9 - Unauthenticated Arbitrary File Upload
Slug
forms-to-klaviyo
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
forms-to-sendinblue
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
forms-to-zapier
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
forms-to-zapier
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
forms-to-zapier
Published
2024-04-12
Title
Forms to Zapier, Integromat, IFTTT, Workato, Automate.io, elastic.io, Built.io, APIANT, Webhook <= 1.1.12 - Authenticated (Administrator+) SQL Injection
Slug
formscrm
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
formsite
Published
2024-04-05
Title
Formsite | Embed online forms to collect orders, registrations, leads, and surveys < 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
formstack
Published
2025-12-05
Title
Formstack Online Forms <= 2.0.2 - Missing Authorization
Slug
formularios-de-contacto-salesup
Published
2025-05-20
Title
Formulario de contacto SalesUp! <= 1.0.14 - Reflected Cross-Site Scripting
Slug
formzu-wp
Published
2023-11-28
Title
Formzu WP < 1.6.7 - Contributor+ Stored XSS via id
Slug
formzu-wp
Published
2024-01-19
Title
Formzu WP < 1.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
forty-four
Published
2024-05-06
Title
Forty Four – 404 Plugin for WordPress <= 1.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
forum-server
Published
2014-08-01
Title
WP Forum Server <= 1.7.3 - wpf-insert.php edit_post_id Parameter SQL Injection
Slug
forum-server
Published
2014-08-01
Title
WP Forum Server <= 1.7.3 - fs-admin/wpf-add-forum.php groupid Parameter XSS
Slug
forum-server
Published
2014-08-01
Title
WP Forum Server <= 1.7.3 - fs-admin/fs-admin.php Multiple Parameter XSS
Slug
forum-server
Published
2014-08-01
Title
WP Forum Server <= 1.7 - SQL Injection
Slug
forum-server
Published
2014-08-01
Title
WP Forum Server 1.6.5 - feed.php topic Parameter SQL Injection
Slug
forum-server
Published
2014-08-01
Title
WP Forum Server 1.6.5 - index.php Multiple Parameter SQL Injection