Happyforms vulnerabilities
8 published CVEs name Happyforms among the affected products.
- 8Published CVEs8 of them scored
- 5Last 12 monthspublished in the last year
- 1Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-93766
Happyforms Pro <= 1.38.9 - Unauthenticated Stored Cross-Site Scripting via 'happyforms_client_referer' Parameter
Happyforms · Happyforms Pro
High7.2 - CVE-2026-93755
Happyforms Pro <= 1.38.9 - Unauthenticated Stored Cross-Site Scripting via Client-IP/X-Forwarded-For Header
Happyforms · Happyforms Pro
High7.2 - CVE-2026-97065
WordPress Happyforms plugin <= 1.26.15 - Cross Site Scripting (XSS) vulnerability
Happyforms · Happyforms
High7.1 - CVE-2025-11977
HappyForms <= 1.26.12 - Authenticated (Admin+) Local File Inclusion
happyforms · Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms
Medium6.6 - CVE-2026-49768
WordPress Happyforms plugin <= 1.26.13 - PHP Object Injection vulnerability
Happyforms · Happyforms
Critical9.8 - CVE-2024-44063
WordPress Happyforms plugin <= 1.26.0 - Cross Site Scripting (XSS) vulnerability
Happyforms · Happyforms
Medium6.5 - CVE-2024-23521
WordPress Happyforms plugin <= 1.25.10 - Broken Access Control vulnerability
Happyforms · Happyforms
Medium5.3 - CVE-2023-48752
WordPress Happyforms Plugin <= 1.25.9 is vulnerable to Cross Site Scripting (XSS)
Happyforms · Form builder to get in touch with visitors, grow your email list and collect payments — Happyforms
High7.1