← WordPress Vulnerabilities
WordPress security by component

SureForms – Contact Form, Payment Form & Other Custom Form Builder

SureForms – Contact Form, Payment Form & Other Custom Form Builder is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Mar 28, 2026; the highest CVE/CNA score is 7.5.

Plugin slug: sureforms-contact-form-payment-form-other-custom-form-builder

CVE-2026-4987: SureForms – Contact Form, Payment Form & Other Custom Form Builder: A security weakness

SureForms – Contact Form, Payment Form & Other Custom Form Builder is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 2.5.2.

PublishedMar 28, 2026
Known safe version> 2.5.2
Safe version
Mar 28, 2026 CVE-2026-4987
SureForms – Contact Form, Payment Form & Other Custom Form Builder: A security weakness
SureForms – Contact Form, Payment Form & Other Custom Form Builder is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 2.5.2.
> 2.5.2
CVE7.5
NVDPending