BrainStormForce SureForms – Drag and Drop Form Builder for WordPress

• CVE-2025-6691 High 8.1 SureForms – Drag and Drop Form Builder for WordPress <= 1.7.3 - Unauthenticated Arbitrary File Deletion Triggered via Administrator Submission Deletion 1.0%
• CVE-2025-6742 High 7.5 SureForms – Drag and Drop Form Builder for WordPress <= 1.7.3 - Unauthenticated PHP Object Injection (PHAR) Triggered via Admin Submission Deletion 0.6%