CVE-2026-61947 Unauthenticated Cross Site Scripting (XSS) in Form Vibes – Database Manager for Forms <= 1.5.2 versions

Description

Unauthenticated Cross Site Scripting (XSS) in Form Vibes – Database Manager for Forms <= 1.5.2 versions.

Affected products and versions

Product	Affected versions	Fixed in
Form Vibes – Database Manager for Forms 1.5	earliest → 1.5.2	No fix stated

Other CVEs of Form Vibes – Database Manager for Forms

The 5 CVEs of Form Vibes – Database Manager for Forms →

CVE-2025-13409 The Form Vibes – Database Manager for Forms plugin for WordPress is vulnerable to SQL Injection via the 'params'… 4.9 Medium CVE-2022-4974 The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request… 6.3 Medium CVE-2024-5309 The Form Vibes – Database Manager for Forms plugin for WordPress is vulnerable to unauthorized access of data and… 5.4 Medium CVE-2024-5325 The Form Vibes plugin for WordPress is vulnerable to SQL Injection via the ‘fv_export_data’ parameter in all versions up… 8.8 High