VendorsBrainstorm Forcesureformsany version
Vulnerabilities

Brainstorm Force SureForms any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

7CVEs
CVE-2025-6691
SureForms – Drag and Drop Form Builder for WordPress <= 1.7.3 - Unauthenticated Arbitrary File Deletion Triggered via Administrator Submission Deletion
Published 2025-07-09 · Analyzed
8.1EPSS 0.010
CVE-2025-6742
SureForms – Drag and Drop Form Builder for WordPress <= 1.7.3 - Unauthenticated PHP Object Injection (PHAR) Triggered via Admin Submission Deletion
Published 2025-07-09 · Analyzed
7.5EPSS 0.005
CVE-2025-5921
SureForms < 1.7.2 - Reflected XSS
Published 2025-08-01 · Analyzed
5.8EPSS 0.002
CVE-2024-12713
SureForms – Drag and Drop Form Builder for WordPress <= 1.2.2 - Missing Authorization to Unauthenticated Protected Post Disclosure
Published 2025-01-08 · Analyzed
5.3EPSS 0.003
CVE-2025-3471
SureForms < 1.4.4 - Contributor+ Settings Update
Published 2025-04-30 · Analyzed
4.9EPSS 0.003
CVE-2025-3513
SureForms < 1.4.4 - Admin+ Stored XSS
Published 2025-05-02 · Analyzed
3.5EPSS 0.003
CVE-2025-3514
SureForms < 1.4.4 - Admin+ Stored XSS
Published 2025-05-02 · Analyzed
3.5EPSS 0.003