What’s Vulnerable › Products

Smart Forms vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Smart Forms version is affected

Latest Smart Forms vulnerabilities

• CVE-2026-32574 — WordPress Smart Forms plugin <= 2.6.104 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2023-49856 — WordPress Smart Forms plugin <= 2.6.84 - Authenticated Arbitrary Options Change Vulnerability (CVSS 8.8)
• CVE-2024-33593 — WordPress Smart Forms plugin <= 2.6.91 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2024-1905 — Smart Forms < 2.6.96 - Admin+ Stored XSS (CVSS 5.9)
• CVE-2024-1307 — Smart Forms < 2.6.94 - Subscriber+ Edit Entries via Broken Access Control (CVSS 6.5)
• CVE-2024-1306 — Smart Forms < 2.6.94 - Edit Entries via CSRF (CVSS 5.4)
• CVE-2023-7203 — Smart Forms < 2.6.87 - Subscriber+ Arbitrary Entry Deletion (CVSS 6.1)
• CVE-2022-0163 — Smart Forms < 2.6.71 - Subscriber+ Form Data Download (CVSS 6.5)
• CVE-2019-5924 — (CVSS 8.8)