Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

SureForms – Contact Form, Payment Form & Other Custom Form Builder — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in SureForms – Contact Form, Payment Form & Other Custom Form Builder, with AI-generated Chinese analysis, references, and POCs.

Vendor: brainstormforce

CVE IDTitleCVSSSeverityPublished
CVE-2026-4987 SureForms <= 2.5.2 - Unauthenticated Payment Amount Validation Bypass via 'form_id' CWE-20 7.5 High2026-03-28
CVE-2025-14855 SureForms <= 2.2.0 - Unauthenticated Stored Cross-Site Scripting CWE-79 7.2 High2025-12-21
CVE-2025-12535 SureForms <= 1.13.1 - Cross-Site Request Forgery Protection Bypass via Improper Nonce Distribution CWE-352 5.3 Medium2025-11-19
CVE-2025-12536 SureForms <= 1.13.1 - Missing Authorization to Unauthenticated Sensitive Information Exposure CWE-359 5.3 Medium2025-11-13
CVE-2025-10732 SureForms – Drag and Drop Form Builder for WordPress <= 1.12.1 - Missing Authorization to Authenticated (Contributor+) Information Disclosure CWE-862 4.3 Medium2025-10-14
CVE-2025-10489 SureForms – Drag and Drop Form Builder for WordPress <= 1.12.0 - Missing Authorization to Authenticated (Contributor+) Form Creation CWE-862 4.3 Medium2025-09-20
CVE-2024-12713 SureForms – Drag and Drop Form Builder for WordPress <= 1.2.2 - Missing Authorization to Unauthenticated Protected Post Disclosure CWE-862 5.3 Medium2025-01-08

All 7 known CVE vulnerabilities affecting SureForms – Contact Form, Payment Form & Other Custom Form Builder with full Chinese analysis, references, and POCs where available.