What’s Vulnerable › Products

Forms vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Forms version is affected

Latest Forms vulnerabilities

• CVE-2026-86799 — Forms < 3.0.2 - Unauthenticated Stored XSS via Form Submission (CVSS 8.8)
• CVE-2024-51791 — WordPress Forms plugin <= 2.8.0 - Arbitrary File Upload vulnerability (CVSS 10.0)
• CVE-2021-24505 — Forms < 1.12.3 - Authenticated Stored Cross-Site Scripting (XSS) (CVSS 5.4)