Happyforms Happyforms Pro
2 CVEs affecting Happyforms Happyforms Pro. Latest disclosed: 2026-11-07. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-93766 | High | 7.2 | 2026-11-07 | The Happyforms Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'happyforms_client_referer' parameter in all versions up to, and i… |
CVE-2026-93755 | High | 7.2 | 2026-11-07 | The Happyforms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via spoofable client IP headers in versions up to, and including, 1.38.9. This… |