Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
cforms2
WordPress
· Plugin
13 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
cformsII <= 15.1.3 - Unauthenticated Stored Cross-Site Scripting
CVE-2026-39435
cforms2
WordPress
High
Fix reported
2026-06-08
cformsII <= 15.1.3 - Cross-Site Request Forgery
CVE-2026-39436
cforms2
WordPress
Medium
Fix reported
2026-05-26
cformsII <= 15.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
CVE-2023-52203
cforms2
WordPress
Medium
Fix reported
2025-05-02
cformsII <= 15.0.6 - Unauthenticated Stored Cross-Site Scripting
CVE-2024-22149
cforms2
WordPress
High
Fix reported
2025-05-02
CformsII <= 15.0.1 - Unauthenticated HTML Injection & Cross-Site Request Forgery
CVE-2019-15238
cforms2
WordPress
High
Fix reported
2024-01-22
cformsII <= 14.13.2 - Cross-Site Scripting
CVE-2017-18559
cforms2
WordPress
Medium
Fix reported
2024-01-22
CformsII <=11.5 - Cross-Site Scripting
CVE-2010-3977
cforms2
WordPress
Medium
Fix reported
2024-01-22
cformsII <= 13.1 - Cross-Site Scripting
CVE-2014-10377
cforms2
WordPress
Medium
Fix reported
2024-01-22
cformsII <= 15.0.4 - Cross-Site Request Forgery leading to Settings Updates
CVE-2023-25449
cforms2
WordPress
Medium
Fix reported
2024-01-22
CformsII <= 14.10.1 - CAPTCHA Bypass
cforms2
WordPress
Medium
Fix reported
2024-01-22
cformsII < 14.6.10 - SQL Injection
CVE-2015-9333
cforms2
WordPress
Critical
Fix reported
2024-01-22
cformsII <= 14.12.3 - Authenticated SQL Injection
CVE-2017-18570
cforms2
WordPress
High
Fix reported
2024-01-22
cformsII < 14.8 - Arbitrary File Upload
CVE-2014-9473
cforms2
WordPress
Critical
Fix reported
2024-01-22