WordPress security by component
Form Vibes – Database Manager for Forms
Plugin description
Form Vibes – Database Manager for Forms is a WordPress component with 5 published CVE records in this archive. The latest tracked vulnerability was published Jul 23, 2026; the highest CVE/CNA score is 8.8.
Plugin slug:
form-vibesLatest vulnerability
CVE-2026-61947: Form Vibes – Database Manager for Forms: Cross-site scripting
Form Vibes – Database Manager for Forms is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is n/a through 1.5.2.
| Safe version |
|
||
|---|---|---|---|
| Jul 23, 2026 |
CVE-2026-61947
Form Vibes – Database Manager for Forms: Cross-site scripting
Form Vibes – Database Manager for Forms is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is n/a through 1.5.2.
|
1.5.3 |
CVE7.1
NVDPending
|
| Jul 11, 2026 |
CVE-2026-13378
Form Vibes – Save Contact Form 7 & Elementor Form Entries to Database: Cross-site scripting
Form Vibes – Save Contact Form 7 & Elementor Form Entries to Database is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 1.5.2.
|
> 1.5.2 |
CVE7.2
NVDPending
|
| Jan 06, 2026 |
CVE-2025-13409
Form Vibes – Database Manager for Forms: SQL injection
Form Vibes – Database Manager for Forms is affected by SQL injection. Exploitation requires at least administrator-level access. A successful request can alter database queries and expose or modify WordPress data.
|
See mitigation notes |
CVE4.9
NVDPending
|
| Sep 05, 2024 |
CVE-2024-5309
Form Vibes – Database Manager for Forms: A security weakness
Form Vibes – Database Manager for Forms is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE5.4
NVDPending
|
| Jul 12, 2024 |
CVE-2024-5325
Form Vibes: SQL injection
Form Vibes is affected by SQL injection. Exploitation requires at least subscriber-level access. A successful request can alter database queries and expose or modify WordPress data.
|
See mitigation notes |
CVE8.8
NVD6.5
|