Known vulnerabilities in WPVibes Form Vibes – Database Manager for Forms
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-61947 | Unauthenticated Cross Site Scripting (XSS) in Form Vibes – Database Manager for Forms <= 1.5.2 versions | 7.1 High | Jul 23, 2026 |
| CVE-2025-13409 | The Form Vibes – Database Manager for Forms plugin for WordPress is vulnerable to SQL Injection via the 'params'… | 4.9 Medium | Jan 6, 2026 |
| CVE-2022-4974 | The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request… | 6.3 Medium | Oct 16, 2024 |
| CVE-2024-5309 | The Form Vibes – Database Manager for Forms plugin for WordPress is vulnerable to unauthorized access of data and… | 5.4 Medium | Sep 5, 2024 |
| CVE-2024-5325 | The Form Vibes plugin for WordPress is vulnerable to SQL Injection via the ‘fv_export_data’ parameter in all versions up… | 8.8 High | Jul 12, 2024 |
Other WPVibes products
Addon Elements for Elementor (formerly Elementor Addon Elements) 21
Elementor Addon Elements 6
AnyWhere Elementor 5
WP Mail Log 4
Dynific Addons for Elementor (formerly AnyWhere Elementor) 2
anywhere_elementor 1
AnyWhere Elementor Pro 1
form_vibes 1
Form Vibes – Save Contact Form 7 & Elementor Form Entries to Database 1
Redirect 404 Error Page to Homepage or Custom Page with Logs 1