FormLayer
FormLayer has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of August 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.
The most common weakness is Exposure Of Sensitive Information To An Unauthorized Actor, behind 1 of the records (100%).
The one issue recorded for FormLayer has a vendor fix available, so running the current release closes it.
All of these findings were reported by Ananda Dhakal. FormLayer is installed on roughly 100,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2026-59519FormLayer <= 1.0.6 - Unauthenticated Information Exposure
Read the full analysisVulnerability Records
FormLayer
Author
Softaculous
FormLayer is a state-of-the-art form builder that leverages the power of modern web technologies to provide a stunning, intuitive drag-and-drop experience. Whether you need a simple contact form or a complex multi-step application, FormLayer provides the tools to build it in minutes. Built with performance and aesthetics in mind, FormLayer features an administrative interface, real-time live previews, and a sophisticated design system that makes form building a joy rather than a chore. Key Free Features Intuitive Drag & Drop Builder: Build complex layouts with ease. 15+ Standard Fields: Name, Email, Text, Dropdown, Radio, Checkboxes, and more. Real-time Preview: See exactly how your form looks on Desktop, Tablet, and Mobile. Modern Templates: Start with pre-built templates for common use cases. Entry Management: View and manage all submissions directly in your WordPress dashboard. Responsive by Default: All forms look great on every device out of the box. AJAX Submissions: No page reloads for a smoother user experience. Spam Protection: Built-in support for hCaptcha (free), Cloudflare Turnstile and Google reCAPTCHA (Pro). Premium Pro Features Advanced Fields: Phone, Ratings, Password, File Uploads, and more. Professional Templates: Access to a library of high-conversion templates. Powerful Integrations: Connect to Mailchimp, Slack, Discord, Google Sheets, Notion, and Trello. Custom Styling: Advanced control over colors, fonts, and spacing. Priority Support: Get help when you need it most. Multi-column Layouts: Create professional grid-based forms effortlessly. Third Party API usage hCaptcha: integrated for spam protection in the free version. Service: https://www.hcaptcha.com/ Privacy Policy: https://www.hcaptcha.com/privacy Cloudflare Turnstile: supported for invisible bot defense in the premium version. Service: https://www.cloudflare.com/products/turnstile/ Privacy Policy: https://www.cloudflare.com/privacypolicy/ Google reCAPTCHA: available in the premium version. Service: https://www.google.com/recaptcha/about/ Privacy Policy: https://policies.google.com/privacy Other third-party integrations available in the premium version: Mailchimp: https://mailchimp.com/ Slack: https://slack.com/ Discord: https://discord.com/ Google Sheets: https://workspace.google.com/products/sheets/ Notion: https://www.notion.so/ Trello: https://trello.com/
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C