BSK Forms Blacklist
BSK Forms Blacklist has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; all 5 are fixed as of September 2026. Their average CVSS score is 5.6, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2024 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 3 of the records (60%). Other recurring categories include Cross-Site Request Forgery (CSRF), SQL Injection.
Every one of the 5 issues recorded for BSK Forms Blacklist has a vendor fix available, so running the current release closes all known holes.
5 independent researchers contributed these findings, one record each. BSK Forms Blacklist is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2023-30872BSK Forms Blacklist <= 3.6.2 - Authenticated (Administrator+) SQL Injection via 'order' and 'orderby'
Read the full analysisVulnerability Records
BSK Forms Blacklist
Author
bannersky
This plugin helps you avoid spam submissions from Gravity Forms, Formidable Forms, WPForms, Contact Form 7 and Forminator. This is the free version and you can set it up to use a blacklist. If the field value contains / same as an item / keyword in the applied blacklist, the form submission will be blocked. It’s easy to use, you just need to create a blacklist, enable settings for the form and apply the blacklist to the form fields. You can set one or more fields to validate. Validation messages can be customized for the form. The Pro version described here: https://www.bannersky.com/gravity-forms-blacklist-and-custom-validation/ can also be used as a whitelist, IP address, email or invitation code to validate visitor input. Support for blocking email domains, giving you the option to allow or block submissions instead of always allowing submissions. Supports blocking IP addresses by country or allowing only IP addresses from a certain country. Short Description This plugin helps you avoid spam submissions from Gravity Forms, Formidable Forms, WPForms, Contact Form 7 and Forminator. It checks the form field content and block submitting base on your keywords. Blocking IP, Country is only supported in the Pro version.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C