SU
Product
SureForms
4
CVEs
0
On KEV
6.5
Max CVSS
3
New 30D
Severity mix
Critical 0High 0Medium 4Low 0
Watch
Add SureForms to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-108495 | 6.5 | Oct 13 | WordPress SureForms plugin <= 2.12.7 - Cross Site Scripting (XSS) vulnerability Affected: through 2.12.7 |
| CVE-2026-116387 New | 5.3 | Oct 29 | WordPress SureForms plugin <= 2.12.9 - Broken Access Control vulnerability Affected: through 2.12.9 |
| CVE-2026-116402 New | 5.3 | Oct 29 | WordPress SureForms plugin <= 2.12.9 - Content Injection vulnerability Affected: through 2.12.9 |
| CVE-2026-85308 | 5.3 | Sep 3 | WordPress SureForms plugin <= 2.12.5 - Insecure Direct Object References (IDOR) vulnerability Affected: through 2.12.5 |
Showing 4