{"items":[{"id":"CVE-2026-93766","published":"2026-11-07T11:26:30.560Z","updated":"2026-11-07T11:26:30.560Z","title":"Happyforms Pro <= 1.38.9 - Unauthenticated Stored Cross-Site Scripting via 'happyforms_client_referer' Parameter","severity":"HIGH","score":7.2,"vendor":"Happyforms","product":"Happyforms Pro","kev":false,"epss":null,"kevAdded":null},{"id":"CVE-2026-93755","published":"2026-11-07T11:26:25.087Z","updated":"2026-11-07T11:26:25.087Z","title":"Happyforms Pro <= 1.38.9 - Unauthenticated Stored Cross-Site Scripting via Client-IP/X-Forwarded-For Header","severity":"HIGH","score":7.2,"vendor":"Happyforms","product":"Happyforms Pro","kev":false,"epss":null,"kevAdded":null},{"id":"CVE-2026-97065","published":"2026-09-30T12:27:49.261Z","updated":"2026-09-30T13:27:04.897Z","title":"WordPress Happyforms plugin <= 1.26.15 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Happyforms","product":"Happyforms","kev":false,"epss":0.00175,"kevAdded":null},{"id":"CVE-2025-11977","published":"2026-07-10T07:48:44.939Z","updated":"2026-07-10T10:07:52.289Z","title":"HappyForms <= 1.26.12 - Authenticated (Admin+) Local File Inclusion","severity":"MEDIUM","score":6.6,"vendor":"happyforms","product":"Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms","kev":false,"epss":0.00866,"kevAdded":null},{"id":"CVE-2026-49768","published":"2026-06-15T20:19:24.982Z","updated":"2026-06-16T14:42:29.622Z","title":"WordPress Happyforms plugin <= 1.26.13 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"Happyforms","product":"Happyforms","kev":false,"epss":0.00383,"kevAdded":null},{"id":"CVE-2024-44063","published":"2024-09-15T07:54:07.630Z","updated":"2026-04-28T16:10:17.321Z","title":"WordPress Happyforms plugin <= 1.26.0 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Happyforms","product":"Happyforms","kev":false,"epss":0.00261,"kevAdded":null},{"id":"CVE-2024-23521","published":"2024-06-11T15:34:46.214Z","updated":"2026-04-28T16:09:10.090Z","title":"WordPress Happyforms plugin <= 1.25.10 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Happyforms","product":"Happyforms","kev":false,"epss":0.00381,"kevAdded":null},{"id":"CVE-2023-48752","published":"2023-11-30T16:19:42.943Z","updated":"2026-04-28T16:08:54.845Z","title":"WordPress Happyforms Plugin <= 1.25.9 is vulnerable to Cross Site Scripting (XSS)","severity":"HIGH","score":7.1,"vendor":"Happyforms","product":"Form builder to get in touch with visitors, grow your email list and collect payments — Happyforms","kev":false,"epss":0.00412,"kevAdded":null}]}