All 9 CVE vulnerabilities found in SureForms, with AI-generated Chinese analysis, references, and POCs.
Vendor: Unknown
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-85308 | WordPress SureForms plugin <= 2.12.5 - Insecure Direct Object References (IDOR) vulnerability CWE-639 | 5.3 | Medium | 2026-09-03 |
| CVE-2026-19500 | SureForms contains an uncontrolled resource consumption vulnerability | - | - | 2026-08-18 |
| CVE-2026-19501 | CVE-2026-19501 | - | - | 2026-08-18 |
| CVE-2026-11567 | SureForms < 2.11.1 - Unauthenticated Payment Amount Bypass | - | - | 2026-07-14 |
| CVE-2025-8282 | SureForms < 1.9.1 - Admin+ Stored XSS | 4.8AI | Medium AI | 2025-09-23 |
| CVE-2025-5921 | SureForms < 1.7.2 - Reflected XSS | 6.1 | - | 2025-08-01 |
| CVE-2025-3514 | SureForms < 1.4.4 - Admin+ Stored XSS | 4.8AI | Medium AI | 2025-05-02 |
| CVE-2025-3513 | SureForms < 1.4.4 - Admin+ Stored XSS | 4.8AI | Medium AI | 2025-05-02 |
| CVE-2025-3471 | SureForms < 1.4.4 - Contributor+ Settings Update | 4.3AI | Medium AI | 2025-04-30 |
All 9 known CVE vulnerabilities affecting SureForms with full Chinese analysis, references, and POCs where available.