Known vulnerabilities in the Forms plugin

7 security advisories have been published for the Forms plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.

Forms - Cross-Site Request Forgery (CSRF) (CVE-2025-2935) MEDIUM 2025-06-06
Forms - Remote Code Execution (CVE-2024-13725) CRITICAL 2025-02-18
Forms - Cross-Site Request Forgery (CSRF) (CVE-2023-7065) MEDIUM 2024-05-04
Forms - Cross-Site Scripting (XSS) (CVE-2023-2488) MEDIUM 2023-06-05
Forms - Cross-Site Scripting (XSS) (CVE-2023-2489) MEDIUM 2023-06-05
Forms - Cross-Site Scripting (XSS) (CVE-2021-24517) MEDIUM 2021-09-06
Forms - Cross-Site Scripting (XSS) (CVE-2021-24505) MEDIUM 2021-08-09

Browse the full threat database

WordPress security that blocks attacks before they land.

sales@hackhalt.com

© Hack Halt Inc. All rights reserved.