Formsite | Embed online forms to collect orders, registrations, leads, and surveys
Formsite | Embed online forms to collect orders, registrations, leads, and surveys has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Formsite | Embed online forms to collect orders, registrations, leads, and surveys has a vendor fix available, so running the current release closes it.
All of these findings were reported by Ngô Thiên An (ancorn_). Formsite | Embed online forms to collect orders, registrations, leads, and surveys is installed on roughly 900 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.5.10.
CVE-2024-31257Formsite | Embed online forms to collect orders, registrations, leads, and surveys <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records
Formsite | Embed online forms to collect orders, registrations, leads, and surveys
Author
Formsite
Embed a Formsite form in your WordPress content using the provided shortcode from your Formsite account. Formsite is a service that enables non-technical users to build professional, powerful and responsive web forms and surveys. Example: [formsite host=”fsX” key=”4z7b-6gG5F3sgR0JyE” width=”100%”] Create professional quality contact forms, lead forms, surveys, order forms and registration forms Choose from over 100 customizable templates and 40 question types Build multiple page forms with logic to show/hide questions and skip pages Style forms to match your website design Embed forms in any page Calculate values and scores using form fields Get responses Collect sensitive data with secure forms Allow partial responses using Save & Return Collect file uploads Link related forms with workflow logic Collect payments Order forms made easy for products and services Process payments with payment services such as PayPal, Braintree, Authorize.net, Stripe or Pay by Check Integrate with third party services Integrate with third party services such as Box, Dropbox, Google Drive, Google Sheets, MailChimp, Microsoft OneDrive, Salesforce and Zapier and use them to improve your workflow A Formsite account is required. Signup for free
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C