Skip to content
OpenAdvisories

Product · Edgar Rojas

AIO Forms – Craft Complex Forms Easily

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2025-11889

    AIO Forms <= 1.3.18 - Authenticated (Admin+) Arbitrary File Upload via Zip Import

    The AIO Forms – Craft Complex Forms Easily plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the import functionality in all versions up to, and including, 1.3.18. This makes it possible for authenticated atta…

    Edgar Rojas AIO Forms – Craft Complex Forms Easily Web / CMS