CVE-2025-6742 SureForms – Drag and Drop Form Builder for WordPress <= 1.7.3 - Unauthenticated PHP Object Injection (PHAR) Triggered via Admin Submission Deletion

[
  {
    "vendor": "brainstormforce",
    "product": "SureForms – Drag and Drop Form Builder for WordPress",
    "versions": [
      {
        "version": "0.0",
        "status": "affected",
        "lessThanOrEqual": "0.0.13",
        "versionType": "semver"
      },
      {
        "version": "1.0",
        "status": "affected",
        "lessThanOrEqual": "1.0.6",
        "versionType": "semver"
      },
      {
        "version": "1.1",
        "status": "affected",
        "lessThanOrEqual": "1.1.1",
        "versionType": "semver"
      },
      {
        "version": "1.2",
        "status": "affected",
        "lessThanOrEqual": "1.2.4",
        "versionType": "semver"
      },
      {
        "version": "1.3",
        "status": "affected",
        "lessThanOrEqual": "1.3.1",
        "versionType": "semver"
      },
      {
        "version": "1.4",
        "status": "affected",
        "lessThanOrEqual": "1.4.4",
        "versionType": "semver"
      },
      {
        "version": "1.5",
        "status": "affected"
      },
      {
        "version": "1.6",
        "status": "affected",
        "lessThanOrEqual": "1.6.4",
        "versionType": "semver"
      },
      {
        "version": "1.7",
        "status": "affected",
        "lessThanOrEqual": "1.7.3",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]