Skip to content
Noroxi

Flo Forms

flo-forms · plugin

Known security vulnerabilities for Flo Forms. Find out in seconds which version runs on your site with WP Lens.

5 known vulnerabilities

1 with public exploit code · latest Nov 21, 2025

Vulnerabilities

  • CVE-2025-13159

    Flo Forms – Easy Drag & Drop Form Builder <= 1.0.43 - Unauthenticated Stored Cross-Site Scripting via SVG Upload

    High 7.1

  • CVE-2025-32213

    WordPress Flo Forms plugin <= 1.0.43 - Broken Access Control vulnerability

    Medium 6.5

  • CVE-2024-35174

    WordPress Flo Forms plugin <= 1.0.42 - Broken Access Control vulnerability

    Medium 5.3

  • CVE-2023-35095

    WordPress Flo Forms Plugin <= 1.0.40 is vulnerable to Cross Site Scripting (XSS)

    Medium 4.8

  • CVE-2023-47692

    WordPress Flo Forms plugin <= 1.0.41 - Broken Access Control vulnerability

    Medium 4.3

← Back to directory