Happyforms vulnerabilities

6 published CVEs name Happyforms among the affected products.

Critical 1High 2Medium 3Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2026-97065
WordPress Happyforms plugin <= 1.26.15 - Cross Site Scripting (XSS) vulnerability
Happyforms · Happyforms
High7.1
CVE-2025-11977
HappyForms <= 1.26.12 - Authenticated (Admin+) Local File Inclusion
happyforms · Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms
Medium6.6
CVE-2026-49768
WordPress Happyforms plugin <= 1.26.13 - PHP Object Injection vulnerability
Happyforms · Happyforms
Critical9.8
CVE-2024-44063
WordPress Happyforms plugin <= 1.26.0 - Cross Site Scripting (XSS) vulnerability
Happyforms · Happyforms
Medium6.5
CVE-2024-23521
WordPress Happyforms plugin <= 1.25.10 - Broken Access Control vulnerability
Happyforms · Happyforms
Medium5.3
CVE-2023-48752
WordPress Happyforms Plugin <= 1.25.9 is vulnerable to Cross Site Scripting (XSS)
Happyforms · Form builder to get in touch with visitors, grow your email list and collect payments — Happyforms
High7.1