Forms (Unknown) - vulnerabilities (CVEs)

6 CVEs, 1 in the last 30 days, 2 known versions, newest CVE from 2026-10-14. Vendor: Unknown.

CVEs of Forms

• CVE-2026-86799 - CVSS 8.8 (high), 2026-10-14: The Forms WordPress plugin before 3.0.2 does not sanitise submitted form values on storage, nor escape them before outputting them on the form submissions…
• CVE-2023-2489 - CVSS 4.8 (medium), 2023-06-05: The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2023 does not sanitise and escape some of its settings, which could…
• CVE-2023-2488 - CVSS 6.1 (medium), 2023-06-05: The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2023 does not sanitise and escape various parameters before outputting…
• CVE-2022-4120 - CVSS 9.8 (critical), 2022-12-26: The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2022.6 passes base64 encoded user input to the unserialize() PHP…
• CVE-2021-24517 - CVSS 5.4 (medium), 2021-09-06: The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2021.18 does not escape some of its settings, allowing high privilege…
• CVE-2021-24505 - CVSS 5.4 (medium), 2021-08-09: The Forms WordPress plugin before 1.12.3 did not sanitise its input fields, leading to Stored Cross-Site scripting issues. The plugin was vulnerable to an…