BrainStormForce SureForms – Contact Form, Payment Form & Other Custom Form Builder

• CVE-2026-4987 High 7.5 SureForms <= 2.5.2 - Unauthenticated Payment Amount Validation Bypass via 'form_id' 1.0%
• CVE-2025-14855 High 7.2 SureForms <= 2.2.0 - Unauthenticated Stored Cross-Site Scripting 0.4%
• CVE-2025-12535 Medium 5.3 SureForms <= 1.13.1 - Cross-Site Request Forgery Protection Bypass via Improper Nonce Distribution 0.2%
• CVE-2025-12536 Medium 5.3 SureForms <= 1.13.1 - Missing Authorization to Unauthenticated Sensitive Information Exposure 0.8%
• CVE-2025-10732 Medium 4.3 SureForms – Drag and Drop Form Builder for WordPress <= 1.12.1 - Missing Authorization to Authenticated (Contributor+) Information Disclosure 0.3%
• CVE-2025-10489 Medium 4.3 SureForms – Drag and Drop Form Builder for WordPress <= 1.12.0 - Missing Authorization to Authenticated (Contributor+) Form Creation 0.2%
• CVE-2024-12713 Medium 5.3 SureForms – Drag and Drop Form Builder for WordPress <= 1.2.2 - Missing Authorization to Unauthenticated Protected Post Disclosure 0.4%