What’s Vulnerable › Products

flothemesplugins Flo Forms – Easy Drag & Drop Form Builder vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your flothemesplugins Flo Forms – Easy Drag & Drop Form Builder version is affected

Latest flothemesplugins Flo Forms – Easy Drag & Drop Form Builder vulnerabilities

• CVE-2025-13159 — Flo Forms – Easy Drag & Drop Form Builder <= 1.0.43 - Unauthenticated Stored Cross-Site Scripting via SVG Upload (CVSS 7.1)
• CVE-2024-35174 — WordPress Flo Forms plugin <= 1.0.42 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2023-35095 — WordPress Flo Forms Plugin <= 1.0.40 is vulnerable to Cross Site Scripting (XSS) (CVSS 4.8)
• CVE-2021-4367 — Flo Forms – Easy Drag & Drop Form Builder <= 1.0.35 - Options Change to Stored Cross-Site Scripting (CVSS 5.4)