flothemesplugins
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Flo Forms | 2 | – | Apr 10, 2025 |
| Flo Forms – Easy Drag & Drop Form Builder | 2 | – | Nov 21, 2025 |
Exploited and recent CVEs
- CVE-2025-13159 Flo Forms – Easy Drag & Drop Form Builder <= 1.0.43 - Unauthenticated Stored Cross-Site Scripting via SVG Upload 0.3%
- CVE-2025-32213 WordPress Flo Forms plugin <= 1.0.43 - Broken Access Control vulnerability 0.3%
- CVE-2023-47692 WordPress Flo Forms plugin <= 1.0.41 - Broken Access Control vulnerability 0.3%
- CVE-2021-4367 Flo Forms – Easy Drag & Drop Form Builder <= 1.0.35 - Options Change to Stored Cross-Site Scripting 0.7%