SureForms – Drag and Drop Form Builder for WordPress vulnerabilities

2 known vulnerabilities in SureForms – Drag and Drop Form Builder for WordPress from Brainstormforce. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  SureForms – Drag and Drop Form Builder for…: Deserialization of Untrusted Data

  CVE-2025-6742Jul 9, 2025Brainstormforce

  The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.7.3 via the use of file_exists() in the delete_entry_files() function without restriction on the path pr

• 8.1 High severity

  SureForms – Drag and Drop Form Builder for…: Externally Controlled Reference to a Resource in Another Sphere

  CVE-2025-6691Jul 9, 2025BrainstormforceEPSS 1.05%

  The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_entry_files() function in all versions up to, and including, 1.7.3. This makes it poss