FormLift for Infusionsoft Web Forms vulnerabilities

Product

FormLift for Infusionsoft Web Forms

by Adrian Tobey · last CVE Jun 27, 2025

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 1High 1Medium 1Low 0

Severity

Exploitation

Watch

Add FormLift for Infusionsoft Web Forms to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-38773	9.8	2%	Jul 22	WordPress formlift plugin <= 7.5.17 - Unauthenticated Blind SQL Injection vulnerability Affected: through 7.5.17
CVE-2025-47654	7.1	0%	Jun 27	WordPress FormLift for Infusionsoft Web Forms plugin <= 7.5.20 - Reflected Cross Site Scripting (XSS) vulnerability Affected: through 7.5.20
CVE-2025-31434	6.5	0%	Mar 28	WordPress FormLift for Infusionsoft Web Forms plugin <= 7.5.19 - Cross Site Scripting (XSS) Vulnerability Affected: through 7.5.19