Skip to content
OpenAdvisories

Product · WPVibes

Form Vibes – Database Manager for Forms

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2026-61947

    WordPress Form Vibes – Database Manager for Forms plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Form Vibes – Database Manager for Forms <= 1.5.2 versions.

    WPVibes Form Vibes – Database Manager for Forms
  • High 8.8
    CVE-2024-5325

    Form Vibes <= 1.4.10 - Authenticated (Subscriber+) SQL Injection via fv_export_data

    The Form Vibes plugin for WordPress is vulnerable to SQL Injection via the ‘fv_export_data’ parameter in all versions up to, and including, 1.4.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing S…

    WPVibes Form Vibes – Database Manager for Forms Web / CMS