EUVD-2026-83472

The Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.1.0.4 via the uploadfile function. This is due to a mismatch between the field validation pipeline and the file persistence pipeline, where hidden file upload fields bypass...

CVE-2026-84434 Gravity Forms <= 3.1.0.4 - Unauthenticated Arbitrary File Upload via Hidden File Upload Field

The Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.1.0.4 via the uploadfile function. This is due to a mismatch between the field validation pipeline and the file persistence pipeline, where hidden file upload fields bypass...

CVE-2026-84434 Gravity Forms <= 3.1.0.4 - Unauthenticated Arbitrary File Upload via Hidden File Upload Field

The Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.1.0.4 via the uploadfile function. This is due to a mismatch between the field validation pipeline and the file persistence pipeline, where hidden file upload fields bypass...

CVE-2026-84434

Gravity Forms (WordPress plugin) is vulnerable to unauthenticated arbitrary file upload in all versions up to and including 3.1.0.4 . The root cause is a mismatch between the field validation pipeline and the file persistence pipeline: hidden file upload fields bypass extension validation, and a ...

CVE-2026-15664: Improper Neutralization of Input During Web Page Generation

The Quill Forms | Conversational Multi Step Forms, Surveys & quizzes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Multiple Choice 'Other' Value in all versions up to, and including, 5.7.1 due to insufficient input sanitization and output escaping. This makes it possible f...

CVE-2026-84434: Unrestricted Upload of File with Dangerous Type

The Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.1.0.4 via the uploadfile function. This is due to a mismatch between the field validation pipeline and the file persistence pipeline, where hidden file upload fields bypass...

PT-2026-95738

Name of the Vulnerable Software and Affected Versions Gravity Forms versions prior to 3.1.1 Description An arbitrary file upload issue exists in the Gravity Forms plugin for WordPress via the upload file function. The flaw stems from a mismatch between the field validation pipeline and the file...

PT-2026-95780

Name of the Vulnerable Software and Affected Versions Quill Forms | Conversational Multi Step Forms, Surveys & quizzes versions prior to 5.7.2 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Stored Cross-Site Scripting XSS, a technique...

CVE-2026-92229: Improper Control of Generation of Code

The The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.57.2. This is due to the software allowing users to execute an action that does not properly validate a value...

PT-2026-95746

Name of the Vulnerable Software and Affected Versions Forminator Forms versions prior to 1.57.3 Description Unauthenticated attackers can execute arbitrary shortcodes because the software fails to properly validate a value before running the do shortcode function. This issue is triggered via the...

WordPress Bricksforge plugin < 3.1.8.8 - Unauthenticated Arbitrary Password Reset via Pro Forms vulnerability

Unauthenticated Arbitrary Password Reset via Pro Forms vulnerability discovered by moonge in WordPress Plugin Bricksforge versions 3.1.8.8...

WordPress Gravity Forms plugin <= 3.1.0.4 - Unauthenticated Arbitrary File Upload via Hidden File Upload Field vulnerability

Unauthenticated Arbitrary File Upload via Hidden File Upload Field vulnerability discovered by 0xd4rk5id3 - EnvoraSec in WordPress Plugin Gravity Forms versions = 3.1.0.4...

WordPress Forminator Forms plugin <= 1.57.2 - Unauthenticated Arbitrary Shortcode Execution via 'current_url' Parameter vulnerability

Unauthenticated Arbitrary Shortcode Execution via 'currenturl' Parameter vulnerability discovered by Kuba in WordPress Plugin Forminator versions = 1.57.2...

WordPress Login & Register Forms plugin < 4.0.2 - Unauthenticated Account Takeover via Password Reset Verification State Keyed on a Client-Supplied Address Header vulnerability

Unauthenticated Account Takeover via Password Reset Verification State Keyed on a Client-Supplied Address Header vulnerability discovered by Artus KG in WordPress Plugin Login/Signup Popup versions 4.0.2...

CVE-2026-75961

The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to generic SQL Injection via the 'additionalparams' parameter in all versions up to, and including, 9.3.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

EUVD-2026-82753

The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to generic SQL Injection via the 'additionalparams' parameter in all versions up to, and including, 9.3.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

CVE-2026-75961 NEX-Forms <= 9.3.0 - Authenticated (Administrator+) SQL Injection via 'operator' Key of the 'additional_params' Parameter

The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to generic SQL Injection via the 'additionalparams' parameter in all versions up to, and including, 9.3.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

CVE-2026-75961

NEX-Forms (Ultimate Forms Plugin for WordPress) versions up to and including 9.3.0 are vulnerable to SQL Injection via the operator key of the additional_params parameter. The root cause is that the operator allowlist enforced by get_table_records() is not applied when the same tainted array is f...

CVE-2026-75961 NEX-Forms <= 9.3.0 - Authenticated (Administrator+) SQL Injection via 'operator' Key of the 'additional_params' Parameter

The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to generic SQL Injection via the 'additionalparams' parameter in all versions up to, and including, 9.3.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

VulnCheck KEV: CVE-2026-84434

The Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.1.0.4 via the uploadfile function. This is due to a mismatch between the field validation pipeline and the file persistence pipeline, where hidden file upload fields bypass...