Formsite | Embed online forms to collect orders, registrations, leads, and surveys

Formsite | Embed online forms to collect orders, registrations, leads, and surveys has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Formsite | Embed online forms to collect orders, registrations, leads, and surveys has a vendor fix available, so running the current release closes it.

All of these findings were reported by Ngô Thiên An (ancorn_). Formsite | Embed online forms to collect orders, registrations, leads, and surveys is installed on roughly 900 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.5.10.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Formsite | Embed online forms to collect orders, registrations, leads, and surveys vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2024-31257

Formsite | Embed online forms to collect orders, registrations, leads, and surveys <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Plugin Profile
Latestv1.7

Formsite | Embed online forms to collect orders, registrations, leads, and surveys

Formsite

Author

Formsite

5.0(1)
100/100
Last Updated
2024-03-20 (3y ago)
Active Installs
900+
Downloads
14,623
Requires WP
2.6+
Requires PHP
0+
Tested up to
WP 6.5.10
Created
2019-10-15 (7y ago)

Embed a Formsite form in your WordPress content using the provided shortcode from your Formsite account. Formsite is a service that enables non-technical users to build professional, powerful and responsive web forms and surveys. Example: [formsite host=”fsX” key=”4z7b-6gG5F3sgR0JyE” width=”100%”] Create professional quality contact forms, lead forms, surveys, order forms and registration forms Choose from over 100 customizable templates and 40 question types Build multiple page forms with logic to show/hide questions and skip pages Style forms to match your website design Embed forms in any page Calculate values and scores using form fields Get responses Collect sensitive data with secure forms Allow partial responses using Save & Return Collect file uploads Link related forms with workflow logic Collect payments Order forms made easy for products and services Process payments with payment services such as PayPal, Braintree, Authorize.net, Stripe or Pay by Check Integrate with third party services Integrate with third party services such as Box, Dropbox, Google Drive, Google Sheets, MailChimp, Microsoft OneDrive, Salesforce and Zapier and use them to improve your workflow A Formsite account is required. Signup for free

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C