Skip to content
OpenAdvisories

Product · WPQuark

eForm - WordPress Form Builder

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2025-48333

    WordPress eForm - WordPress Form Builder < 4.19.1 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPQuark eForm - WordPress Form Builder wp-fsqm-pro allows Reflected XSS.This issue affects eForm - WordPress Form Builder: from n/a through < 4.19.1.

    WPQuark eForm - WordPress Form Builder Web / CMS
  • High 7.2
    CVE-2025-1294

    eForm <= 4.18.0 - Unauthenticated Stored Cross-Site Scripting

    The eForm - WordPress Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 4.18.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers …

    WPQuark eForm - WordPress Form Builder Web / CMS