Form Generator for WordPress

Form Generator for WordPress has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.4, and the most serious one scores 4.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Form Generator for WordPress has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Abdulsamad Yusuf (0xVenus). Form Generator for WordPress is installed on roughly 200 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 3.7.41.

Strategic Overview

Avg CVSSMedium
4.4/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all Form Generator for WordPress vulnerabilities before they are exploited.

Most severe open issueCVSS 4.4CVE-2025-58665

Form Generator for WordPress <= 1.52 - Authenticated (Administrator+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Form Generator for WordPress banner
Latestv1.52

Form Generator for WordPress

tmontg1

Author

tmontg1

4.3(4)
86/100
Last Updated
2014-02-27 (13y ago)
Active Installs
200+
Downloads
19,376
Requires WP
3.0+
Requires PHP
0+
Tested up to
WP 3.7.41
Created
2013-10-03 (13y ago)

Form Generator seamlessly delivers JotForm to your WordPress website. No more jumping back and forth between websites to edit forms, view submissions, and copy code! Form Generator lets you manage your JotForm account from your WordPress dashboard so can take advantage of all JotForm’s great features without leaving your editor. With a single click you can now: Create, edit & clone forms, Embed forms in posts, pages & widgets, View & delete form submissions, and Download form submissions to Excel. For Form Generator users, I’ve created a series of beautiful template contact forms, RSVP forms, volunteer forms, donate forms with payment processing & more! These forms add to the over 2500 templates already available from JotForm which you can add to your website in seconds. WHY JOTFORM? JotForm started as the web’s first WYSIWYG form editor and now it’s used by over 1,000,000 satisfied customers. The reason so many people are using JotForm is because it’s flexible, dynamic, and easy to use. Not only is JotForm completely customizable but it can be integrated with many of the most popular tools on the web today. Feed your email sign up forms directly into your Constant Contact, AWeber, iContact, or MailChimp account. Get submissions and files sent directly to your Dropbox, Google Drive, Google Speadsheets, or Box accounts. Integrate with CRM’s like Salesforce and Zoho. You can even embed your forms on Facebook. What else? JotForm allows you to accept payments using popular processors like PayPal, PayPal Pro, Stripe, Authorize.net, Google Checkout, Click Bank, World Pay, and others. So why JotForm? Because it’s amazing!! Try it out and I know you’ll think so too. Support Please direct all of your installation questions, ideas, suggestions, bug reports, and troubleshooting inquiries to the plugin support forum at wpactivism.com.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C