Skip to content
OpenAdvisories

Vendor

linksoftware

2 known vulnerabilities.

Products

HTML Forms – Simple WordPress Forms Plugin 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2025-13861

    HTML Forms – Simple WordPress Forms Plugin <= 1.6.0 - Unauthenticated Stored Cross-Site Scripting

    The HTML Forms – Simple WordPress Forms Plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in all versions up to and including 1.6.0 due to insufficient sanitization of fabricated file upload field metadata before displaying it …

    linksoftware HTML Forms – Simple WordPress Forms Plugin Web / CMS
  • Medium 4.4
    CVE-2025-12125

    HTML Forms <= 1.5.5 - Authenticated (Admin+) Stored Cross-Site Scripting

    The HTML Forms – Simple WordPress Forms Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.5.5 due to insufficient input sanitization and output escaping. This makes it possible …

    linksoftware HTML Forms – Simple WordPress Forms Plugin Web / CMS