Login Request a demo
SU
Product
Sureforms
by Brainstormforce · last CVE Aug 1, 2025
7
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 0High 2Medium 3Low 2
Severity
All severities7Critical0High2Medium3Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Sureforms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-6691
8.1
1%
Jul 9
SureForms – Drag and Drop Form Builder for WordPress <= 1.7.3 - Unauthenticated Arbitrary File Deletion Triggered via Administrator Submission Deletion
Affected: 0.0.2 before 0.0.14; 1.0.0 before 1.0.7; 1.1.0 before 1.1.2; 1.2.0 before 1.2.5; 1.3.0 before 1.3.2; 1.4.0 before 1.4.5; +3 more
CVE-2025-6742
7.5
1%
Jul 9
SureForms – Drag and Drop Form Builder for WordPress <= 1.7.3 - Unauthenticated PHP Object Injection (PHAR) Triggered via Admin Submission Deletion
Affected: 0.0.2 before 0.0.14; 1.0.0 before 1.0.7; 1.1.0 before 1.1.2; 1.2.0 before 1.2.5; 1.3.0 before 1.3.2; 1.4.0 before 1.4.5; +3 more
CVE-2025-5921
5.8
0%
Aug 1
SureForms < 1.7.2 - Reflected XSS
Affected: before 1.7.2
CVE-2024-12713
5.3
0%
Jan 8
SureForms – Drag and Drop Form Builder for WordPress <= 1.2.2 - Missing Authorization to Unauthenticated Protected Post Disclosure
Affected: before 1.2.3
CVE-2025-3471
4.9
0%
Apr 30
SureForms < 1.4.4 - Contributor+ Settings Update
Affected: before 1.4.4
CVE-2025-3514
3.5
0%
May 2
SureForms < 1.4.4 - Admin+ Stored XSS
Affected: before 1.4.4
CVE-2025-3513
3.5
0%
May 2
SureForms < 1.4.4 - Admin+ Stored XSS
Affected: before 1.4.4
Showing 7