FormBuilder

FormBuilder has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2012 and 2022; 4 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 6.8, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high. 2016 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 2 of the records (40%). Other recurring categories include Cross-Site Scripting, SQL Injection.

4 of the records (80%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2022.

3 independent researchers contributed these findings, most of them (2) reported by Burak Kelebek.

Strategic Overview

Avg CVSSMedium

6.8/ 10

Patch Coverage80%

Open

Fixed

Get automatic notifications for all FormBuilder vulnerabilities before they are exploited.

Most severe open issueCVSS 6.5CVE-2022-0830

FormBuilder <= 1.08 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

5 records


2022-03-08 00:00	FormBuilder <= 1.08 - Cross-Site Request Forgery FormBuilder <= 1.08	`CVE-2022-0830`	6.5 Medium	Chiragh Arora	No
2016-08-08 00:00	FormBuilder < 1.08 - Cross-Site Request Forgery FormBuilder <= 1.07	`N/A`	6.3 Medium	Burak Kelebek	Yes
2016-08-04 00:00	FormBuilder <= 1.05 - Reflected Cross-Site Scripting FormBuilder <= 1.05	`CVE-2016-10910`	6.1 Medium	Peter Ganzevles	Yes
2016-07-01 00:00	FormBuilder < 1.08 - SQL Injection FormBuilder < 1.08	`N/A`	8.8 High	Burak Kelebek	Yes
2012-05-28 00:00	FormBuilder <= 0.90 - Unauthenticated Stored Cross-Site Scripting FormBuilder <= 0.90	`CVE-2012-6715`	6.1 Medium	Anonymous	Yes

Showing 1–5 of 5 reports