Skip to content
OpenAdvisories

Vendor

Vikas Ratudi

9 known vulnerabilities.

Products

VPSUForm 6 Chakra test 1 Page Expire Popup/Redirection for WordPress 1 VPSUForm – Drag & Drop Contact Form Builder with Email Automation 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.1
    CVE-2025-30778

    WordPress VForm plugin <= 3.1.9 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vikas Ratudi VPSUForm v-form allows Reflected XSS.This issue affects VPSUForm: from n/a through <= 3.1.9.

    Vikas Ratudi VPSUForm
  • High 7.1
    CVE-2024-54302

    WordPress VForm plugin <= 3.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vikas Ratudi VPSUForm v-form allows Reflected XSS.This issue affects VPSUForm: from n/a through <= 3.0.0.

    Vikas Ratudi VPSUForm
  • High 7.2
    CVE-2024-6770

    Lifetime free Drag & Drop Contact Form Builder for WordPress VForm <= 2.1.5 - Unauthenticated Stored Cross-Site Scripting

    The Lifetime free Drag & Drop Contact Form Builder for WordPress VForm plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.1.5 due to insufficient input sanitization and output escaping. This makes it poss…

    Vikas Ratudi VPSUForm – Drag & Drop Contact Form Builder with Email Automation Web / CMS