Known vulnerabilities in the Conversational Form Builder plugin
12 security advisories have been published for the Conversational Form Builder plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Conversational Form Builder - Cross-Site Scripting (XSS) (CVE-2026-18146) HIGH
- Conversational Form Builder - Cross-Site Scripting (XSS) (CVE-2026-17571) MEDIUM
- Conversational Form Builder - Security Vulnerability (CVE-2026-17567) MEDIUM
- Conversational Form Builder - Cross-Site Scripting (XSS) (CVE-2026-16655) HIGH
- Conversational Form Builder - Security Vulnerability (CVE-2026-12400) MEDIUM
- Conversational Form Builder - Security Vulnerability (CVE-2026-5395) HIGH
- Conversational Form Builder - Cross-Site Scripting (XSS) (CVE-2026-6828) MEDIUM
- Conversational Form Builder - Broken Access Control (CVE-2026-4160) MEDIUM
- Conversational Form Builder - Broken Access Control (CVE-2025-13722) MEDIUM
- Conversational Form Builder - Security Vulnerability (CVE-2025-13748) MEDIUM
- Conversational Form Builder - Remote Code Execution (CVE-2025-9260) MEDIUM
- Conversational Form Builder - Security Vulnerability (CVE-2024-13666) MEDIUM