Product by Brainstorm Force

    Sureforms – Contact Form, Payment Form & Other Custom Form Builder

    7 known vulnerabilities in Sureforms – Contact Form, Payment Form & Other Custom Form Builder (Brainstorm Force), 0 of them actively exploited (CISA KEV).

    Key figures

    7

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Sureforms – Contact Form, Payment Form & Other Custom Form Builder (Brainstorm Force)
    HighCVE-2026-4987

    SureForms <= 2.5.2 - Unauthenticated Payment Amount Validation Bypass via 'form_id'

    		7.5
    MediumCVE-2025-12536

    SureForms <= 1.13.1 - Missing Authorization to Unauthenticated Sensitive Information Exposure

    		5.3
    HighCVE-2025-14855

    SureForms <= 2.2.0 - Unauthenticated Stored Cross-Site Scripting

    		7.2
    MediumCVE-2024-12713

    SureForms – Drag and Drop Form Builder for WordPress: Missing Authorization

    also in 1 other product

    		5.3
    MediumCVE-2025-12535

    SureForms <= 1.13.1 - Cross-Site Request Forgery Protection Bypass via Improper Nonce Distribution

    		5.3
    MediumCVE-2025-10732

    Missing Authorization (CVE-2025-10732)

    		4.3
    MediumCVE-2025-10489

    Missing Authorization (CVE-2025-10489)

    		4.3

    All products by Brainstorm Force