Radar sectionsPlugins & themes
Check my site

WordPress plugin

Quform - WordPress Form Builder security & vulnerabilities

quform— active installsLast vulnerability Jun 25, 2026

No known unpatched vulnerabilities in the latest version

All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

2Known vulnerabilities
  • Critical0
  • High1
  • Medium1
  • Low0
Vulnerabilities per year
2024: 1 vulnerability1242026: 1 vulnerability126

All Quform - WordPress Form Builder vulnerabilities

Nothing in this view

No vulnerabilities match this filter. Show all.

Quform - WordPress Form Builder: common questions

Does Quform - WordPress Form Builder have known vulnerabilities?

Yes. VulnCrest Radar lists 2 known vulnerabilities in Quform - WordPress Form Builder: 1 high, 1 medium. None are known to affect version null.

How do I check which version of Quform - WordPress Form Builder I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Quform - WordPress Form Builder vulnerability?

CVE-2026-56058, published Jun 25, 2026: Quform - WordPress Form Builder <= 2.23.0 - Authenticated (Subscriber+) Arbitrary File Upload. Severity: High (CVSS 8.8).

Is any Quform - WordPress Form Builder vulnerability listed in CISA KEV?

No. None of the known Quform - WordPress Form Builder vulnerabilities is currently listed in the CISA KEV catalog.

Search VulnCrest Radar

Are you sure?