Advisories · Technology

SureForms.

Every CVE that names SureForms among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-19500 CVE record

CVSS 7.5 High

SureForms contains an uncontrolled resource consumption vulnerability
- SureForms
- Denial of service
Not analysed yet 18 Aug 2026
CVE-2026-19501 CVE record

CVSS 8.8 High

CVE-2026-19501
- SureForms
- Other injection
Not analysed yet 18 Aug 2026
CVE-2026-11567 CVE record

CVSS 5.9 Medium

SureForms < 2.11.1 - Unauthenticated Payment Amount Bypass
- SureForms
Not analysed yet 14 Jul 2026
CVE-2025-8282 CVE record

CVSS 3.5 Low

SureForms < 1.9.1 - Admin+ Stored XSS
- SureForms
Not analysed yet 23 Sept 2025
CVE-2025-5921 CVE record

CVSS 5.8 Medium

SureForms < 1.7.2 - Reflected XSS
- SureForms
Not analysed yet 1 Aug 2025
CVE-2025-3514 CVE record

CVSS 3.5 Low

SureForms < 1.4.4 - Admin+ Stored XSS
- SureForms
Not analysed yet 2 May 2025
CVE-2025-3513 CVE record

CVSS 3.5 Low

SureForms < 1.4.4 - Admin+ Stored XSS
- SureForms
Not analysed yet 2 May 2025
CVE-2025-3471 CVE record

CVSS 4.9 Medium

SureForms < 1.4.4 - Contributor+ Settings Update
- SureForms
Not analysed yet 30 Apr 2025