Known Vulnerabilities for Drag And Drop Form Builder by Hashthemes
Listed below are 10 of the newest known vulnerabilities associated with "Drag And Drop Form Builder" by "Hashthemes".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-15288 json | The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Improper Input Validation in... | Not Provided | 2026-07-10 | 2026-07-14 |
| CVE-2026-14894 json | The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up t... | Not Provided | 2026-07-10 | 2026-07-10 |
| CVE-2026-11777 json | The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to generic SQ... | Not Provided | 2026-06-18 | 2026-06-18 |
| CVE-2026-11776 json | The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to generic SQ... | Not Provided | 2026-06-18 | 2026-06-18 |
| CVE-2026-11581 json | The Kali Forms — Contact Form & Drag-and-Drop Builder WordPress plugin before 2.4.13 does not sanitise a form field's capti... | Not Provided | 2026-06-30 | 2026-06-30 |
| CVE-2026-9107 json | The Kali Forms — Contact Form & Drag-and-Drop Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via... | Not Provided | 2026-07-01 | 2026-07-01 |
| CVE-2026-8692 json | The Vedrixa Forms – User Registration Form, Signup Form & Drag & Drop Form Builder plugin for WordPress is vulnerable to au... | Not Provided | 2026-05-22 | 2026-05-22 |
| CVE-2026-7052 json | The HT Contact Form – Drag & Drop Form Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Script... | Not Provided | 2026-05-28 | 2026-05-28 |
| CVE-2026-3359 json | The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to SQL Inject... | Not Provided | 2026-05-05 | 2026-05-05 |
| CVE-2026-2470 json | The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Incorrect Authorization i... | Not Provided | 2026-06-13 | 2026-06-15 |