SureForms – Contact Form, Payment Form & Other Custom Form Builder vulnerabilities

2 known vulnerabilities in SureForms – Contact Form, Payment Form & Other Custom Form Builder from Brainstormforce. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  The SureForms – Contact Form, Payment Form & Other Custom Form Builder plugin for WordPress is…

  CVE-2026-4987Mar 28, 2026Brainstormforce

  The SureForms – Contact Form, Payment Form & Other Custom Form Builder plugin for WordPress is vulnerable to Payment Amount Bypass in all versions up to, and including, 2.5.2. This is due to the create_payment_intent() function performing a payment validation

• 7.2 High severity

  SureForms – Contact Form, Payment Form & Other…: Improper Neutralization of Input During Web Page Generation

  CVE-2025-14855Dec 21, 2025Brainstormforce

  The SureForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form field parameters in all versions up to, and including, 2.2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated att