Skip to content
OpenAdvisories

Vendor

flothemesplugins

4 known vulnerabilities.

Products

Flo Forms 2 Flo Forms – Easy Drag & Drop Form Builder 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2025-13159 Public exploit

    Flo Forms – Easy Drag & Drop Form Builder <= 1.0.43 - Unauthenticated Stored Cross-Site Scripting via SVG Upload

    The Flo Forms – Easy Drag & Drop Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG file uploads in all versions up to, and including, 1.0.43. This is due to the plugin allowing SVG file uploads via an unauthenticated AJAX …

    flothemesplugins Flo Forms – Easy Drag & Drop Form Builder Web / CMS