flothemesplugins

Products

ProductCVEsExploitedLatest
Flo Forms2–Apr 10, 2025
Flo Forms – Easy Drag & Drop Form Builder2–Nov 21, 2025

Exploited and recent CVEs

  • CVE-2025-13159 High 7.1 Flo Forms – Easy Drag & Drop Form Builder <= 1.0.43 - Unauthenticated Stored Cross-Site Scripting via SVG Upload 0.3%
  • CVE-2025-32213 Medium 6.5 WordPress Flo Forms plugin <= 1.0.43 - Broken Access Control vulnerability 0.3%
  • CVE-2023-47692 Medium 4.3 WordPress Flo Forms plugin <= 1.0.41 - Broken Access Control vulnerability 0.3%
  • CVE-2021-4367 Medium 6.4 Flo Forms – Easy Drag & Drop Form Builder <= 1.0.35 - Options Change to Stored Cross-Site Scripting 0.7%