cleantalk
Vulnerabilities and Security Researches

World first Lifetime free Form Builder for WordPress, CVE-2025-46250

CVE, Research URL

CVE-2025-46250

Home page URL

Security reports for World first Lifetime free Form Builder for WordPress

Application

World first Lifetime free Form Builder for WordPress

Published on
Apr 22, 2025
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vikas Ratudi VForm allows Stored XSS. This issue affects VForm: from n/a through 3.1.14.
Affected versions
Min -, max 3.1.15.
Status
vulnerable
Previous vulnerability researches
MPL-Publisher — Ebook & Audiobook Creator (CVE-2021-39343) , Jun 07, 2024
MPL-Publisher — Ebook & Audiobook Creator (CVE-2025-46226) , Apr 24, 2025
New vulnerability
CM Ad Changer – Ad Manager and Ad Server (CVE-2025-46245) , Apr 24, 2025
Anything Popup (CVE-2025-39397) , Apr 24, 2025
Simple Download Counter (CVE-2025-46240) , Apr 24, 2025
Textmetrics (CVE-2025-46229) , Apr 24, 2025
World first Lifetime free Form Builder for WordPress (CVE-2025-46250) , Apr 24, 2025