HA
Product
Happyforms
by Happyforms · last CVE Sep 30, 2026
7
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 1High 1Medium 5Low 0
Watch

Add Happyforms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-49768
9.8
0%
Jun 15
WordPress Happyforms plugin <= 1.26.13 - PHP Object Injection vulnerability
Affected: through 1.26.13
CVE-2026-97065
7.1
0%
Sep 30
WordPress Happyforms plugin <= 1.26.15 - Cross Site Scripting (XSS) vulnerability
Affected: through 1.26.15
CVE-2023-48752
6.1
0%
Nov 30
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Happyforms Form builder to get in touch with visitors, grow your email list…
Affected: through 1.25.9
CVE-2024-44063
5.4
0%
Sep 15
WordPress Happyforms plugin <= 1.26.0 - Cross Site Scripting (XSS) vulnerability
Affected: through 1.26.0
CVE-2023-0096
5.4
0%
Feb 6
The Happyforms WordPress plugin before 1.22.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which…
Affected: before 1.22.0
CVE-2024-23521
5.3
0%
Jun 11
WordPress Happyforms plugin <= 1.25.10 - Broken Access Control vulnerability
Affected: through 1.25.10
CVE-2024-10054
4.8
0%
May 15
Happyforms < 1.26.3 - Admin+ Stored XSS
Affected: before 1.26.3
Showing 7