WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
formlift
Published
2024-07-19
Title
FormLift for Infusionsoft Web Forms < 7.5.18 - Unauthenticated SQL Injection
Slug
formlift
Published
2025-03-28
Title
FormLift for Infusionsoft Web Forms < 7.5.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
formlift
Published
2025-06-18
Title
FormLift for Infusionsoft Web Forms < 7.5.21 - Reflected Cross-Site Scripting
Slug
formlift
Published
2026-03-25
Title
FormLift for Infusionsoft Web Forms < 7.5.22 - Missing Authorization to Unauthenticated Infusionsoft Connection Hijack via OAuth Connection Flow
Slug
forms-3rdparty-post-again
Published
2024-11-04
Title
Forms: 3rd-Party Post Again <= 0.3 - Reflected Cross-Site Scripting
Slug
forms-ada-form-builder
Published
2023-04-24
Title
Forms Ada <= 1.0 - Unauthenticated Reflected XSS
Slug
forms-bridge
Published
2026-01-27
Title
Forms Bridge < 4.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute
Slug
forms-by-made-it
Published
2021-07-03
Title
Forms < 1.12.3 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
forms-by-made-it
Published
2024-11-08
Title
Forms < 2.8.1 - Unauthenticated Arbitrary File Upload
Slug
forms-by-made-it
Published
2025-08-13
Title
Forms < 3.0.0 - Authenticated (Contributor+) Arbitrary File Upload
Slug
forms-for-campaign-monitor
Published
2023-11-27
Title
Campaign Monitor for WordPress < 2.8.14 - Reflected Cross-Site Scripting
Slug
forms-for-campaign-monitor
Published
2024-07-26
Title
Campaign Monitor for WordPress < 2.8.16 - Unauthenticated Full Path Disclosure
Slug
forms-for-campaign-monitor
Published
2026-01-08
Title
Campaign Monitor for WordPress < 2.9.2 - Missing Authorization
Slug
forms-for-divi
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
forms-gutenberg
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
forms-gutenberg
Published
2024-07-08
Title
Gutenberg Forms <= 2.2.9 - Unauthenticated Arbitrary File Upload
Slug
forms-rb
Published
2026-05-11
Title
Forms Rb <= 1.1.9 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via 'form_id' Parameter
Slug
forms-signature-formidable-online-contract-automation
Published
2026-07-28
Title
Formidable Forms Signature Online Contract Automation < 2.0.2 - Unauthenticated Insecure Direct Object Reference
Slug
forms-to-klaviyo
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
forms-to-sendinblue
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
forms-to-zapier
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
forms-to-zapier
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
forms-to-zapier
Published
2024-04-12
Title
Forms to Zapier, Integromat, IFTTT, Workato, Automate.io, elastic.io, Built.io, APIANT, Webhook <= 1.1.12 - Authenticated (Administrator+) SQL Injection
Slug
formscrm
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
formsite
Published
2024-04-05
Title
Formsite | Embed online forms to collect orders, registrations, leads, and surveys < 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting