CVE-2026-13848

An use after free flaw was found in the Forms component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517345069...

CVE-2026-15126

A flaw was found in Google Chrome's Forms component. A remote attacker could exploit a use-after-free vulnerability by enticing a user to visit a specially crafted HTML page. This could allow the attacker to execute arbitrary code within the browser's sandbox environment, potentially leading to...

CVE-2026-15128

An inappropriate implementation flaw was found in the Forms component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=523756329...

CVE-2026-15125

An inappropriate implementation flaw was found in the Forms component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=523737685...

CVE-2026-65880

Joomla Extension - balbooa.com - Unauthenticated remote code execution in Balbooa Forms 2.4.3 - An insecure form processing logic allowed code execution for forms that include the signature field type...

WordPress Formidable Forms Signature Online Contract Automation plugin <= 2.0.1 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Abdullah Kareem "cyberkareem" in WordPress Plugin Formidable Forms Signature Online Contract Automation versions = 2.0.1...

CVE-2026-65880

Joomla Extension - balbooa.com - Unauthenticated remote code execution in Balbooa Forms 2.4.3 - An insecure form processing logic allowed code execution for forms that include the signature field type...

EUVD-2026-49751

Joomla Extension - balbooa.com - Unauthenticated remote code execution in Balbooa Forms 2.4.3 - An insecure form processing logic allowed code execution for forms that include the signature field type...

CVE-2026-65880 Joomla Extension - balbooa.com - Unauthenticated remote code execution in Balbooa Forms < 2.4.3

Joomla Extension - balbooa.com - Unauthenticated remote code execution in Balbooa Forms 2.4.3 - An insecure form processing logic allowed code execution for forms that include the signature field type...

CVE-2026-65880

Summary: CVE-2026-65880 affects Balbooa Forms (Joomla extension) up to version 2.4.2, with unauthenticated remote code execution due to an insecure form processing logic when a signature field is included. Root cause: insecure form processing logic that allows code execution without authenticatio...

CVE-2026-65880 Joomla Extension - balbooa.com - Unauthenticated remote code execution in Balbooa Forms < 2.4.3

Joomla Extension - balbooa.com - Unauthenticated remote code execution in Balbooa Forms 2.4.3 - An insecure form processing logic allowed code execution for forms that include the signature field type...

CVE-2026-14870

The Database for Contact Form 7, WPforms, Elementor forms WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before reflecting it back in an admin page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2026-14870 Database for Contact Form 7, WPforms, Elementor forms < 1.5.3 - Reflected XSS via form_id

The Database for Contact Form 7, WPforms, Elementor forms WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before reflecting it back in an admin page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2026-14870

The Database for Contact Form 7, WPforms, Elementor forms WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before reflecting it back in an admin page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

EUVD-2026-49657

Unauthenticated Cross Site Scripting XSS in Kali Forms = 2.4.18 versions...

CVE-2026-16587: Missing Authorization

The Advanced Form Integration — Connect Forms to 200+ Apps plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

CVE-2026-14870: Improper Neutralization of Input During Web Page Generation

The Database for Contact Form 7, WPforms, Elementor forms WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before reflecting it back in an admin page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

PT-2026-65443

Joomla Extension - balbooa.com - Unauthenticated remote code execution in Balbooa Forms 2.4.3 - An insecure form processing logic allowed code execution for forms that include the signature field type...

PT-2026-68541

Name of the Vulnerable Software and Affected Versions Formidable Forms Signature Online Contract Automation versions prior to 2.0.2 Description An Insecure Direct Object Reference IDOR exists due to missing validation on a user controlled key. This allows unauthenticated attackers to perform...

CVE-2026-65880: Improper Control of Generation of Code

Joomla Extension - balbooa.com - Unauthenticated remote code execution in Balbooa Forms 2.4.3 - An insecure form processing logic allowed code execution for forms that include the signature field type...