Advisories · Technology
HappyForms.
Every CVE that names HappyForms among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.4 Medium
HappyForms < 1.26.15 - Unauthenticated HTML Injection in Admin Notification Email via client_referer
- HappyForms
- CWE-116
- CVSS 7.1 High
WordPress Happyforms plugin <= 1.26.15 - Cross Site Scripting (XSS) vulnerability
- Happyforms
- Cross-site scripting (XSS)
- CVSS 9.8 CriticalCritical · CVSS 9+
WordPress Happyforms plugin <= 1.26.13 - PHP Object Injection vulnerability
- Happyforms
- Insecure deserialization
- CVSS 4.8 Medium
Happyforms < 1.26.3 - Admin+ Stored XSS
- Happyforms
- CVSS 6.5 Medium
WordPress Happyforms plugin <= 1.26.0 - Cross Site Scripting (XSS) vulnerability
- Happyforms
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
WordPress Happyforms plugin <= 1.25.10 - Broken Access Control vulnerability
- Happyforms
- Broken access control