SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications vulnerabilities

2 known vulnerabilities in SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications from Wpazleen. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  SimpleForm – Form Maker to Chat Apps with…: Unrestricted Upload of File with Dangerous Type

  CVE-2026-118235Oct 31, 2026Wpazleen

  The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.10.2 via the handle_upload function. This is due to missing server-side fi

• 9.8 Critical severity

  SimpleForm – Form Maker to Chat Apps with…: Improper Privilege Management

  CVE-2026-104748Oct 14, 2026Wpazleen

  The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.10.0 This is due to the `wp_ajax_nopriv_simpleform_wp_register` AJAX action