WordPress security by component

GetResponse Forms

Plugin description

GetResponse Forms is a WordPress component with 3 published CVE records in this archive. The latest tracked vulnerability was published Sep 22, 2025; the highest CVE/CNA score is 6.5.

Plugin slug: getresponse

Latest vulnerability

CVE-2025-59549: GetResponse Forms: Cross-site scripting

GetResponse Forms is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PublishedSep 22, 2025

Safe version guidanceSee mitigation notes

		Safe version
Sep 22, 2025	CVE-2025-59549 GetResponse Forms: Cross-site scripting GetResponse Forms is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE6.5 NVDPending
Oct 18, 2024	CVE-2024-8740 GetResponse Forms by Optin Cat: Cross-site scripting GetResponse Forms by Optin Cat is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE6.1 NVDPending
Mar 20, 2023	CVE-2023-0167 GetResponse for: Cross-site scripting GetResponse for is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE5.4 NVD5.4