How severe is CVE-2026-15288?

High severity. CVSS v3 base score is 7.5 out of 10.

Improper input validation in Brainstormforce Sureforms – Drag & Drop Contact Form Builder, Payment Form, Survey, Quiz Calculator

CVE-2026-15288

The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 2.2.1. This is due to the plugin accepting the payment amount directly from user…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.

Affected products

Brainstormforce Sureforms – Drag & Drop Contact Form Builder, Payment Form, Survey, Quiz Calculator — versions 0

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

Frequently asked questions

What is CVE-2026-15288?: CVE-2026-15288 is a high-severity vulnerability in Brainstormforce Sureforms – Drag & Drop Contact Form Builder, Payment Form, Survey, Quiz Calculator, classified under Improper Input Validation. CVSS score: 7.5/10. Published 2026-07-10.
How severe is CVE-2026-15288?: High severity. CVSS v3 base score is 7.5 out of 10.