Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now

SureForms – Drag and Drop Form Builder for WordPress — Vulnerabilities & Security Advisories 2

All 2 CVE vulnerabilities found in SureForms – Drag and Drop Form Builder for WordPress, with AI-generated Chinese analysis, references, and POCs.

Vendor: brainstormforce

CVE IDTitleCVSSSeverityPaused
CVE-2025-6691 SureForms – Drag and Drop Form Builder for WordPress <= 1.7.3 - Unauthenticated Arbitrary File Deletion Triggered via Administrator Submission Deletion CWE-73 8.1 High2025-07-09
CVE-2025-6742 SureForms – Drag and Drop Form Builder for WordPress <= 1.7.3 - Unauthenticated PHP Object Injection (PHAR) Triggered via Admin Submission Deletion CWE-502 7.5 High2025-07-09

All 2 known CVE vulnerabilities affecting SureForms – Drag and Drop Form Builder for WordPress with full Chinese analysis, references, and POCs where available.