BSK Forms Blacklist

BSK Forms Blacklist has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; all 5 are fixed as of September 2026. Their average CVSS score is 5.6, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2024 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 3 of the records (60%). Other recurring categories include Cross-Site Request Forgery (CSRF), SQL Injection.

Every one of the 5 issues recorded for BSK Forms Blacklist has a vendor fix available, so running the current release closes all known holes.

5 independent researchers contributed these findings, one record each. BSK Forms Blacklist is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium
5.6/ 10
Patch Coverage100%
Open

0

Fixed

5

Get automatic notifications for all BSK Forms Blacklist vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2CVE-2023-30872

BSK Forms Blacklist <= 3.6.2 - Authenticated (Administrator+) SQL Injection via 'order' and 'orderby'

Read the full analysis

Vulnerability Records

5 records
Plugin Profile
Latestv4.2

BSK Forms Blacklist

bannersky

Author

bannersky

4.3(12)
86/100
Last Updated
2025-09-01 (1y ago)
Active Installs
1,000+
Downloads
36,174
Requires WP
4.0+
Requires PHP
0+
Tested up to
WP 6.8.8
Created
2017-05-11 (10y ago)

This plugin helps you avoid spam submissions from Gravity Forms, Formidable Forms, WPForms, Contact Form 7 and Forminator. This is the free version and you can set it up to use a blacklist. If the field value contains / same as an item / keyword in the applied blacklist, the form submission will be blocked. It’s easy to use, you just need to create a blacklist, enable settings for the form and apply the blacklist to the form fields. You can set one or more fields to validate. Validation messages can be customized for the form. The Pro version described here: https://www.bannersky.com/gravity-forms-blacklist-and-custom-validation/ can also be used as a whitelist, IP address, email or invitation code to validate visitor input. Support for blocking email domains, giving you the option to allow or block submissions instead of always allowing submissions. Supports blocking IP addresses by country or allowing only IP addresses from a certain country. Short Description This plugin helps you avoid spam submissions from Gravity Forms, Formidable Forms, WPForms, Contact Form 7 and Forminator. It checks the form field content and block submitting base on your keywords. Blocking IP, Country is only supported in the Pro version.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C