FormLayer
FormLayer has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2026; all 2 are fixed as of October 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10. 2026 was the busiest year with 2 disclosures.
The most common weakness is Exposure Of Sensitive Information To An Unauthorized Actor, behind 2 of the records (100%).
Every one of the 2 issues recorded for FormLayer has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. FormLayer is installed on roughly 100,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2026-78151FormLayer < 1.0.9 - Unauthenticated Information Exposure
Read the full analysisVulnerability Records
FormLayer
Author
Softaculous
FormLayer is a state-of-the-art form builder that leverages the power of modern web technologies to provide a stunning, intuitive drag-and-drop experience. Whether you need a simple contact form or a complex multi-step application, FormLayer provides the tools to build it in minutes. Built with performance and aesthetics in mind, FormLayer features an administrative interface, real-time live previews, and a sophisticated design system that makes form building a joy rather than a chore. Key Free Features Intuitive Drag & Drop Builder: Build complex layouts with ease. 15+ Standard Fields: Name, Email, Text, Dropdown, Radio, Checkboxes, and more. Real-time Preview: See exactly how your form looks on Desktop, Tablet, and Mobile. Modern Templates: Start with pre-built templates for common use cases. Entry Management: View and manage all submissions directly in your WordPress dashboard. Responsive by Default: All forms look great on every device out of the box. AJAX Submissions: No page reloads for a smoother user experience. Spam Protection: Built-in support for hCaptcha (free), Cloudflare Turnstile and Google reCAPTCHA (Pro). Premium Pro Features Advanced Fields: Phone, Ratings, Password, File Uploads, and more. Professional Templates: Access to a library of high-conversion templates. Powerful Integrations: Connect to Mailchimp, Slack, Discord, Google Sheets, Notion, and Trello. Custom Styling: Advanced control over colors, fonts, and spacing. Priority Support: Get help when you need it most. Multi-column Layouts: Create professional grid-based forms effortlessly. Third Party API usage hCaptcha: integrated for spam protection in the free version. Service: https://www.hcaptcha.com/ Privacy Policy: https://www.hcaptcha.com/privacy Cloudflare Turnstile: supported for invisible bot defense in the premium version. Service: https://www.cloudflare.com/products/turnstile/ Privacy Policy: https://www.cloudflare.com/privacypolicy/ Google reCAPTCHA: available in the premium version. Service: https://www.google.com/recaptcha/about/ Privacy Policy: https://policies.google.com/privacy Other third-party integrations available in the premium version: Mailchimp: https://mailchimp.com/ Slack: https://slack.com/ Discord: https://discord.com/ Google Sheets: https://workspace.google.com/products/sheets/ Notion: https://www.notion.so/ Trello: https://trello.com/
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C