Flo Forms – Easy Drag & Drop Form Builder

Vulnerabilities 9Slug flo-formsLatest version 1.0.43WordPress.org →Closed

High 7.1 Unfixed Closed

2025-11-21≤ 1.0.43

CVE-2025-13159

Medium 6.5 Unfixed Closed

2025-04-10≤ 1.0.43

CVE-2025-32213

Medium 5.3 Closed

2024-05-17< 1.0.43

CVE-2024-35174

Medium 4.3 Closed

2025-01-02< 1.0.42

CVE-2023-47692

Medium 5.9 Closed

2023-06-20< 1.0.41

CVE-2023-35095

Medium 5.4 Closed

2023-06-07< 1.0.36

CVE-2021-4367

N/A Closed

< 1.0.36

Flo Forms < 1.0.36 - Authenticated Options Change to Stored XSS

N/A Closed

2021-03-16< 1.0.36

Flo Forms – Easy Drag & Drop Form Builder <= 1.0.35 - Options Change to Stored Cross-Site Scripting

N/A Closed

2021-03-16< 1.0.36

WordPress Flo Forms plugin <= 1.0.35 - Authenticated Options Change & Stored Cross-Site Scripting (XSS) vulnerability