Jotform
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Jotform – AI Chatbot | 1 | – | Oct 10, 2026 |
| Jotform Online Forms | 1 | – | Apr 17, 2024 |
| Online Forms — Customizable Payment, Contact, Quiz, Survey Form Builder – Jotform | 1 | – | May 2, 2024 |
Exploited and recent CVEs
- CVE-2026-40803 WordPress Jotform – AI Chatbot plugin <= 3.8.2 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2024-2542 Jotform Online Forms <= 1.3.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode 0.3%
- CVE-2024-32527 WordPress Jotform Online Forms plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability 0.3%