Forms – Ultimate Forms Plugin for WordPress plugin <= 9.1.6 Authenticated (Admin+) SQL Injection vulnerability
10 October, 2025
Forms Plugin <= 9.1.3 Cross Site Request Forgery (CSRF) Vulnerability
20 August, 2025
Forms plugin <= 8.9.1 Authenticated (Custom) Limited Code Execution via get_table_records Function vulnerability
8 May, 2025
Forms plugin <= 8.9.1 Authenticated (Custom) Stored CrossSite Scripting vulnerability
8 May, 2025
Forms – Ultimate Form Builder – Contact forms and much more plugin <= 8.8.1 Unauthenticated Sensitive Information Exposure vulnerability
11 March, 2025