Vulnerabilities / SureForms
SureForms vulnerabilities
Advisories WPSec published for SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz. Other sources may list more. Its attack surface: SureForms on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-15 | WPSEC-2026-0978 | SureForms <= 2.12.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Embedded Post Title Smart Tag | Medium 6.4 | 2.12.9 |
| 2026-10-15 | WPSEC-2026-0977 | SureForms <= 2.12.8 - Authenticated (Contributor+) Sensitive Information Exposure via Smart Tags in Post Content | High 7.7 | 2.12.9 |
License: CC BY 4.0