WordPress plugin
Breezing Forms security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High1
- Medium1
- Low0
All Breezing Forms vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.1 | Reflected Cross-Site Scripting ≤1.2.8.11No patch available | CVE-2025-30520 | |
| High8.8 | SQL Injection ≤1.2.7.30Update to 1.2.7.31 | — |
- Medium6.1Reflected Cross-Site Scripting
≤1.2.8.11No patch available
- High8.8SQL Injection
≤1.2.7.30Update to 1.2.7.31
Breezing Forms: common questions
Does Breezing Forms have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in Breezing Forms: 1 high, 1 medium. At least one is not fixed in the latest version.
How do I check which version of Breezing Forms I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Breezing Forms vulnerability?
CVE-2025-30520, published Mar 27, 2025: Breezing Forms <= 1.2.8.11 - Reflected Cross-Site Scripting. Severity: Medium (CVSS 6.1).
Is any Breezing Forms vulnerability listed in CISA KEV?
No. None of the known Breezing Forms vulnerabilities is currently listed in the CISA KEV catalog.