WordPress plugin
Caldera Forms – More Than Contact Forms security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 6 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium6
- Low0
All Caldera Forms – More Than Contact Forms vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.1 | Reflected Cross-Site Scripting via cf-api <1.9.7Update to 1.9.7 | CVE-2022-0879 | |
| Medium4.8 | Admin+ Stored Cross-Site Scripting <1.9.5Update to 1.9.5 | CVE-2021-24896 | |
| Medium5.5 | Cross Site Scripting ≤1.5.9.1Update to 1.6.0 | CVE-2018-7747 | |
| Medium5.4 | Cross-Site Scripting ≤1.5.4Update to 1.5.5 | — | |
| Medium6.1 | Cross-Site Request Forgery to Stored Cross-Site Scripting ≤1.4.1Update to 1.4.2 | — | |
| Medium6.5 | Sensitive Information Disclosure <1.4.0Update to 1.4.0 | — |
- Medium6.1Reflected Cross-Site Scripting via cf-api
<1.9.7Update to 1.9.7
- Medium4.8Admin+ Stored Cross-Site Scripting
<1.9.5Update to 1.9.5
- Medium5.5Cross Site Scripting
≤1.5.9.1Update to 1.6.0
- Medium5.4Cross-Site Scripting
≤1.5.4Update to 1.5.5
- Medium6.1Cross-Site Request Forgery to Stored Cross-Site Scripting
≤1.4.1Update to 1.4.2
- Medium6.5Sensitive Information Disclosure
<1.4.0Update to 1.4.0
Caldera Forms – More Than Contact Forms: common questions
Does Caldera Forms – More Than Contact Forms have known vulnerabilities?
Yes. VulnCrest Radar lists 6 known vulnerabilities in Caldera Forms – More Than Contact Forms: 6 medium. None are known to affect version null.
How do I check which version of Caldera Forms – More Than Contact Forms I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Caldera Forms – More Than Contact Forms vulnerability?
CVE-2022-0879, published Mar 28, 2022: Caldera Forms <= 1.9.6 - Reflected Cross-Site Scripting via cf-api. Severity: Medium (CVSS 6.1).
Is any Caldera Forms – More Than Contact Forms vulnerability listed in CISA KEV?
No. None of the known Caldera Forms – More Than Contact Forms vulnerabilities is currently listed in the CISA KEV catalog.