WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
formcraft3
Published
2022-02-28
Title
Formcraft3 < 3.8.28 - Unauthenticated SSRF
Slug
formcraft3
Published
2025-02-17
Title
FormCraft - Premium WordPress Form Builder < 3.9.12 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload
Slug
formcraft3
Published
2025-02-17
Title
FormCraft < 3.9.12 - Missing Authorization to Plugin Data Export in formcraft-main.php
Slug
formcraft3
Published
2026-07-22
Title
FormCraft < 3.9.15 - Unauthenticated Stored Cross-Site Scripting via Matrix Field Sub-Parameters
Slug
formello
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
formfacade
Published
2024-02-20
Title
FormFacade < 1.2.2 - Contributor+ Stored XSS
Slug
formfacade
Published
2024-08-16
Title
FormFacade < 1.3.3 - Reflected Cross-Site Scripting
Slug
formfacade
Published
2024-10-25
Title
FormFacade < 1.3.7 - Reflected Cross-Site Scripting
Slug
formfacade
Published
2024-12-11
Title
FormFacade < 1.3.7 - Reflected Cross-Site Scripting
Slug
formfacade
Published
2025-12-31
Title
FormFacade <= 1.4.1 - Cross-Site Request Forgery
Slug
formforall
Published
2023-10-02
Title
Contact form Form For All <= 1.2 - Contributor+ Stored XSS
Slug
formgent
Published
2025-09-30
Title
FormGent < 1.0.4 - Unauthenticated Arbitrary File Deletion
Slug
formgent
Published
2026-03-03
Title
FormGent < 1.10.0 - Unauthenticated Arbitrary File Deletion
Slug
formgent
Published
2026-07-31
Title
FormGent < 1.10.0- Missing Authorization to Unauthenticated Arbitrary File Deletion via 'file_token' Parameter
Slug
formgent
Published
2026-08-05
Title
FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More < 1.10.0 - Unauthenticated Stored Cross-Site Scripting
Slug
formget-contact-form
Published
2015-03-07
Title
FormGet Contact Form 5.3 - Stored XSS
Slug
formget-contact-form
Published
2023-09-22
Title
Contact Form by FormGet <= 5.5.5 - Contributor+ Stored XSS
Slug
formidable
Published
2014-05-11
Title
Formidable Forms Pro < 1.06.03 - Arbitrary File Upload via ofc_upload_image.php
Slug
formidable
Published
2016-01-26
Title
Formidable Forms < 2.0 - Authenticated Blind SQL Injection
Slug
formidable
Published
2017-11-13
Title
Formidable Forms < 2.05.03 - Multiple Vulnerabilities
Slug
formidable
Published
2019-08-09
Title
Formidable < 4.02.01 - Unsafe Deserialisation
Slug
formidable
Published
2021-10-06
Title
Formidable Form Builder < 5.0.07 - Admin+ Stored Cross-Site Scripting
Slug
formidable
Published
2021-01-28
Title
Formidable Form Builder < 4.09.05 - Unauthenticated Stored Cross-Site Scripting
Slug
formidable
Published
2023-02-02
Title
Formidable Forms < 5.5.7 - Arbitrary Entry Deletion via CSRF
Slug
formidable
Published
2023-03-06
Title
Formidable Forms < 6.1 - IP Spoofing