Vulnerabilities / CM HIPAA Forms
CM HIPAA Forms vulnerabilities
Advisories WPSec published for HIPAA FORMS – Add HIPAA Compliant Webforms to Your WordPress Website. Other sources may list more. Its attack surface: CM HIPAA Forms on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-16 | WPSEC-2026-1101 | CM HIPAA Forms <= 3.3.1 - Authenticated (HIPAA Forms Role+) Privilege Escalation via HIPAA Role Capability Update | High 8.8 | 3.3.2 |
| 2026-10-16 | WPSEC-2026-1100 | CM HIPAA Forms <= 3.3.1 - Unauthenticated Email Content Injection via Form Submission Notification Parameters | Medium 5.3 | 3.3.2 |
| 2026-10-16 | WPSEC-2026-1099 | CM HIPAA Forms <= 3.3.1 - Authenticated (HIPAA Forms Role+) Insecure Direct Object Reference to Unassigned Form Submissions | High 7.1 | 3.3.2 |
License: CC BY 4.0