Vulnerabilities in happyforms
8 resultsCVE-2025-11977MEDIUMHappyForms <= 1.26.12 - Authenticated (Admin+) Local File InclusionEPSS 0.9%CVE-2023-48752HIGHWordPress Happyforms Plugin <= 1.25.9 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2026-49768CRITICALWordPress Happyforms plugin <= 1.26.13 - PHP Object Injection vulnerabilityEPSS 0.4%CVE-2024-23521MEDIUMWordPress Happyforms plugin <= 1.25.10 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-44063MEDIUMWordPress Happyforms plugin <= 1.26.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-97065HIGHWordPress Happyforms plugin <= 1.26.15 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-93755HIGHHappyforms Pro <= 1.38.9 - Unauthenticated Stored Cross-Site Scripting via Client-IP/X-Forwarded-For HeaderEPSS —CVE-2026-93766HIGHHappyforms Pro <= 1.38.9 - Unauthenticated Stored Cross-Site Scripting via 'happyforms_client_referer' ParameterEPSS —