Known vulnerabilities in the Drop Form Builder plugin
8 security advisories have been published for the Drop Form Builder plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Drop Form Builder - Remote Code Execution (CVE-2026-14894) CRITICAL
- Drop Form Builder - Broken Access Control (CVE-2026-8692) MEDIUM
- Drop Form Builder - Cross-Site Scripting (XSS) (CVE-2025-13159) HIGH
- Drop Form Builder - Broken Access Control (CVE-2024-12201) MEDIUM
- Drop Form Builder - Cross-Site Scripting (XSS) (CVE-2024-9417) MEDIUM
- Drop Form Builder - PHP Object Injection (CVE-2024-5085) HIGH
- Drop Form Builder - Remote Code Execution (CVE-2024-5084) CRITICAL
- Drop Form Builder - Cross-Site Scripting (XSS) (CVE-2021-4367) MEDIUM