Happyforms
4 CVEs across 3 Happyforms products. Browse Happyforms vulnerabilities, severities, and proof-of-concept exploits.
Happyforms products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-11977 | Medium | 6.6 | 2026-07-10 | The Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms plugin for WordPress is vulnerable to Local File… |
CVE-2026-49768 | Critical | 9.8 | 2026-06-15 | Unauthenticated PHP Object Injection in Happyforms <= 1.26.13 versions. |
CVE-2024-10054 | Medium | 4.8 | 2025-05-15 | The Happyforms WordPress plugin before 1.26.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perfo… |
CVE-2024-44063 | Medium | 6.5 | 2024-09-15 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Happyforms allows Stored XSS.This issue affects Ha… |
CVE-2024-23521 | Medium | 5.3 | 2024-06-11 | Missing Authorization vulnerability in Happyforms.This issue affects Happyforms: from n/a through 1.25.10. |
CVE-2023-48752 | High | 7.1 | 2023-11-30 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Happyforms Form builder to get in touch with visitors, gr… |
CVE-2023-0096 | Medium | 5.4 | 2023-02-06 | The Happyforms WordPress plugin before 1.22.0 does not validate and escape some of its block options before outputting them back in a page/post where the block… |