<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: brainstormforce-sureforms-contact-form-payment-form-other-custom-form-builder</title><description>Every new CVE for brainstormforce-sureforms-contact-form-payment-form-other-custom-form-builder.</description><link>https://agentprime.io/</link><item><title>CVE-2026-4987: SureForms &lt;= 2.5.2 - Unauthenticated Payment Amount Validation Bypass via &apos;form_id&apos;</title><link>https://agentprime.io/advisories/CVE-2026-4987/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-4987/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 28 Mar 2026 01:25:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-14855: SureForms &lt;= 2.2.0 - Unauthenticated Stored Cross-Site Scripting</title><link>https://agentprime.io/advisories/CVE-2025-14855/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-14855/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 21 Dec 2025 07:31:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-12535: SureForms &lt;= 1.13.1 - Cross-Site Request Forgery Protection Bypass via Improper Nonce Distribution</title><link>https://agentprime.io/advisories/CVE-2025-12535/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-12535/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 19 Nov 2025 06:45:25 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-12536: SureForms &lt;= 1.13.1 - Missing Authorization to Unauthenticated Sensitive Information Exposure</title><link>https://agentprime.io/advisories/CVE-2025-12536/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-12536/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 13 Nov 2025 03:27:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-10732: SureForms – Drag and Drop Form Builder for WordPress &lt;= 1.12.1 - Missing Authorization to Authenticated (Contributor+) Information Disclosure</title><link>https://agentprime.io/advisories/CVE-2025-10732/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-10732/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Oct 2025 05:24:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-10489: SureForms – Drag and Drop Form Builder for WordPress &lt;= 1.12.0 - Missing Authorization to Authenticated (Contributor+) Form Creation</title><link>https://agentprime.io/advisories/CVE-2025-10489/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-10489/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 20 Sep 2025 04:27:55 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-12713: SureForms – Drag and Drop Form Builder for WordPress &lt;= 1.2.2 - Missing Authorization to Unauthenticated Protected Post Disclosure</title><link>https://agentprime.io/advisories/CVE-2024-12713/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-12713/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 08 Jan 2025 03:18:10 GMT</pubDate><category>CVE</category></item></channel></rss>