Known vulnerabilities in the Form Maker plugin
23 security advisories have been published for the Form Maker plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Form Maker - SQL Injection (CVE-2026-15993) MEDIUM
- Form Maker - SQL Injection (CVE-2026-11777) MEDIUM
- Form Maker - SQL Injection (CVE-2026-11776) MEDIUM
- Form Maker - SQL Injection (CVE-2026-3330) MEDIUM
- Form Maker - Cross-Site Scripting (XSS) (CVE-2026-4388) HIGH
- Form Maker - Arbitrary File Upload (CVE-2026-1065) HIGH
- Form Maker - Cross-Site Scripting (XSS) (CVE-2026-1058) HIGH
- Form Maker - Cross-Site Scripting (XSS) (CVE-2024-13053) MEDIUM
- Form Maker - Cross-Site Scripting (XSS) (CVE-2024-10680) MEDIUM
- Form Maker - Cross-Site Scripting (XSS) (CVE-2024-10560) LOW
- Form Maker - Cross-Site Scripting (XSS) (CVE-2024-10558) LOW
- Form Maker - Cross-Site Scripting (XSS) (CVE-2024-13605) MEDIUM
- Form Maker - Cross-Site Scripting (XSS) (CVE-2024-10562) LOW
- Form Maker - Cross-Site Scripting (XSS) (CVE-2024-10265) MEDIUM
- Form Maker - Cross-Site Scripting (XSS) (CVE-2024-8633) MEDIUM
- Form Maker - Cross-Site Scripting (XSS) (CVE-2024-6130) MEDIUM
- Form Maker - Cross-Site Scripting (XSS) (CVE-2024-2258) MEDIUM
- Form Maker - Information Disclosure (CVE-2024-2112) MEDIUM
- Form Maker - Cross-Site Request Forgery (CSRF) (CVE-2024-0667) MEDIUM
- Form Maker - Remote Code Execution (CVE-2023-4666) CRITICAL
- Form Maker - SQL Injection (CVE-2022-3300) HIGH
- Form Maker - Cross-Site Scripting (XSS) (CVE-2022-1564) MEDIUM
- Form Maker - Cross-Site Scripting (XSS) (CVE-2021-24526) MEDIUM