Vulnerabilities and security researches forliveforms liveforms

Jun 06, 2024

CVE, Research URL: CVE-2015-9301
Home page URL: Security reports for WordPress Contact Form, Drag and Drop Form Builder Plugin – Live Forms
Application: WordPress Contact Form, Drag and Drop Form Builder Plugin – Live Forms
Date: Aug 13, 2019
Research Description: The liveforms plugin before 3.2.0 for WordPress has SQL injection.
Affected versions: max 1.3.0.
Status: vulnerable

CVE, Research URL: CVE-2017-18497
Home page URL: Security reports for WordPress Contact Form, Drag and Drop Form Builder Plugin – Live Forms
Application: WordPress Contact Form, Drag and Drop Form Builder Plugin – Live Forms
Date: Aug 13, 2019
Research Description: The liveforms plugin before 3.4.0 for WordPress has XSS.
Affected versions: max 3.4.0.
Status: vulnerable

Apr 03, 2025

CVE, Research URL: CVE-2025-30809
Home page URL: Security reports for WordPress Contact Form, Drag and Drop Form Builder Plugin – Live Forms
Application: WordPress Contact Form, Drag and Drop Form Builder Plugin – Live Forms
Date: Mar 27, 2025
Research Description: Missing Authorization vulnerability in Shahjada Live Forms allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Live Forms: from n/a through 4.8.4.
Affected versions: max 4.8.5.
Status: vulnerable

Apr 10, 2025

CVE, Research URL: CVE-2025-32279
Home page URL: Security reports for WordPress Contact Form, Drag and Drop Form Builder Plugin – Live Forms
Application: WordPress Contact Form, Drag and Drop Form Builder Plugin – Live Forms
Date: Apr 08, 2025
Research Description: Missing Authorization vulnerability in Shahjada Live Forms. This issue affects Live Forms: from n/a through 4.8.5.
Affected versions: max 4.8.5.
Status: vulnerable

Apr 18, 2025

CVE, Research URL: CVE-2025-39560
Home page URL: Security reports for WordPress Contact Form, Drag and Drop Form Builder Plugin – Live Forms
Application: WordPress Contact Form, Drag and Drop Form Builder Plugin – Live Forms
Date: Apr 16, 2025
Research Description: Contact Form, Drag and Drop Form Builder Plugin – Live Forms [liveforms] < 4.8.5 CVE-2025-39560 [en] Missing Authorization vulnerability in Shahjada Live Forms allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Live Forms: from n/a through 4.8.4.
Affected versions: max 4.8.5.
Status: vulnerable