SureForms

Admin+ Stored XSS vulnerability < 1.9.1

Missing Authorization to Authenticated (Contributor+) Form Creation vulnerability <= 1.12.0

Reflected XSS vulnerability < 1.7.2

Unauthenticated PHP Object Injection (PHAR) vulnerability <= 1.7.3

Unauthenticated Arbitrary File Deletion <= 1.7.3