WordPress security by component

HTML Forms – Simple WordPress Forms Plugin

Plugin description

HTML Forms – Simple WordPress Forms Plugin is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Nov 08, 2025; the highest CVE/CNA score is 4.4.

Plugin slug: html-forms-simple-wordpress-forms-plugin

Latest vulnerability

CVE-2025-12125: HTML Forms – Simple WordPress Forms Plugin: Cross-site scripting

HTML Forms – Simple WordPress Forms Plugin is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PublishedNov 08, 2025

Safe version guidanceSee mitigation notes

		Safe version
Nov 08, 2025	CVE-2025-12125 HTML Forms – Simple WordPress Forms Plugin: Cross-site scripting HTML Forms – Simple WordPress Forms Plugin is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE4.4 NVDPending