Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Vendor: Happyforms Clear all filters
TI-2025-10981 CVE-2025-11977 · GHSA-f6q8-jxw9-8mhj

HappyForms <= 1.26.12 - Authenticated (Admin+) Local File Inclusion

Priority LOW 33

The Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.26.12 via…

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00866 Published 2026-07-10 No fix listed CWE-98
TI-2024-09328 CVE-2024-10054 · GHSA-4p3r-7jgv-wgrw

Happyforms < 1.26.3 - Admin+ Stored XSS

Priority MEDIUM 55

The Happyforms WordPress plugin before 1.26.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltere…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00326 Published 2025-05-15 Fixed in 1.26.3 CWE-79
TI-2024-29652 CVE-2024-44063 · GHSA-8v8r-m9m9-p8q3

WordPress Happyforms plugin <= 1.26.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Happyforms allows Stored XSS.This issue affects Happyforms: from n/a through 1.26.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00261 Published 2024-09-15 No fix listed CWE-79
TI-2023-26582 CVE-2023-48752 · GHSA-755r-2xqh-f6rj

WordPress Happyforms Plugin <= 1.25.9 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Happyforms Form builder to get in touch with visitors, grow your email list and collect payments — Happyforms allows R…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00412 Published 2023-11-30 No fix listed CWE-79
TI-2023-00092 CVE-2023-0096 · GHSA-34rf-vmxr-2fgx

Happyforms < 1.22.0 - Contributor+ Stored XSS

Priority MEDIUM 58

The Happyforms WordPress plugin before 1.22.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00496 Published 2023-02-06 Fixed in 1.22.0