All 4 CVE vulnerabilities found in FormLift for Infusionsoft Web Forms, with AI-generated Chinese analysis, references, and POCs.
Vendor: Adrian Tobey
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-4281 | FormLift for Infusionsoft Web Forms <= 7.5.21 - Missing Authorization to Unauthenticated Infusionsoft Connection Hijack via OAuth Connection Flow CWE-862 | 5.3 | Medium | 2026-03-26 |
| CVE-2025-47654 | WordPress FormLift for Infusionsoft Web Forms plugin <= 7.5.20 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 | 7.1 | High | 2025-06-27 |
| CVE-2025-31434 | WordPress FormLift for Infusionsoft Web Forms plugin <= 7.5.19 - Cross Site Scripting (XSS) Vulnerability CWE-79 | 6.5 | Medium | 2025-03-28 |
| CVE-2024-38773 | WordPress formlift plugin <= 7.5.17 - Unauthenticated Blind SQL Injection vulnerability CWE-89 | 9.3 | Critical | 2024-07-22 |
All 4 known CVE vulnerabilities affecting FormLift for Infusionsoft Web Forms with full Chinese analysis, references, and POCs where available.