GB Forms DB

GB Forms DB has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 9.8, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 0 high.

The most common weakness is Code Injection, behind 1 of the records (100%).

The one issue recorded for GB Forms DB has a vendor fix available, so running the current release closes it.

All of these findings were reported by CVE_hunter. GB Forms DB is installed on roughly 20 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.1..

Strategic Overview

Avg CVSSCritical
9.8/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all GB Forms DB vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2025-5392

GB Forms DB <= 1.0.2 - Unauthenticated Remote Code Execution

Read the full analysis

Vulnerability Records

1 records
Showing 1–1 of 1 reports
GB Forms DB banner
Latestv1.0.4

GB Forms DB

gb-plugins

Author

gb-plugins

0.0(0)
0/100
Last Updated
2025-07-10 (1y ago)
Active Installs
20+
Downloads
1,793
Requires WP
5.5+
Requires PHP
0+
Tested up to
WP 6.8.1.
Created
2022-08-24 (4y ago)

The GB Forms DB plugin was created to help you collect all your leads from all forms in one place. The Plugin is perfectly compatible with all the big form plugins and also can be used with custom-made forms. Yes, even if you have multiple form plugins in one website ! Yes, even if you want to use custom-made forms ! Yes, it can work with woocommerce register / checkout forms ! The plugin enables you to search, sort, filter, export and manage all your leads in one place. Each lead comes with its own information such as the page and type of form which it was sent from, the date and time etc… For advanced users: You can click on each lead and see more details about the lead and the plugin/form it was sent from. This advanced UI will include all the hidden system fields of the form. Also allows you to hook into the lead data via “action hook” which allows you to easily post leads to CRM , mailing systems etc… Docs and support gb-plugins.com Features ONE CLICK SETUP to activate all forms plugins installed on your website. One DB table collects all leads from all forms in your website. Get Data from Woocommerce register/sign in forms and basically any form. Get Data from custom made forms as well. Manage your leads: Search, sort, delete, filter, export to CSV and more. See any details about your lead: the page it was sent from, the date and time, IP address and much more. Lead Status: New/Viewed. Easy to use and trigger any web hooks. Action hooks to help you transfer your data to any CRM, Mailing system etc… Supported Form Plugins The following Forms Plugins are supported by GB Forms DB – out of the box : Contact form 7 Elementor Gravity forms Ninja forms Custom made forms are also supported. *Any type of form that uses submit post will work with GB Forms DB. *Does not support Ajax-based forms. Translations You can translate GB Forms DB via Poedit

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C