Skip to content

Known vulnerabilities in WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto

Is your version affected?

CVE Summary Score Published
CVE-2024-13362 Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in… 6.1 Medium May 1, 2026
CVE-2025-1530 The Tripetto plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including,… 4.3 Medium Mar 15, 2025
CVE-2024-13497 The WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto plugin for WordPress is vulnerable… 7.2 High Mar 15, 2025
CVE-2024-13829 The WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto plugin for WordPress is vulnerable… 5.3 Medium Feb 5, 2025
CVE-2025-22295 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tripetto WordPress… 7.1 High Jan 9, 2025
CVE-2024-10260 The Tripetto plugin for WordPress is vulnerable to Stored Cross-Site Scripting via File uploads in all versions up to,… 7.2 High Nov 15, 2024
CVE-2022-4974 The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request… 6.3 Medium Oct 16, 2024

Other Tripetto products