GB Forms DB
GB Forms DB has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 9.8, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 0 high.
The most common weakness is Code Injection, behind 1 of the records (100%).
The one issue recorded for GB Forms DB has a vendor fix available, so running the current release closes it.
All of these findings were reported by CVE_hunter. GB Forms DB is installed on roughly 20 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.1..
CVE-2025-5392GB Forms DB <= 1.0.2 - Unauthenticated Remote Code Execution
Read the full analysisVulnerability Records

GB Forms DB
Author
gb-plugins
The GB Forms DB plugin was created to help you collect all your leads from all forms in one place. The Plugin is perfectly compatible with all the big form plugins and also can be used with custom-made forms. Yes, even if you have multiple form plugins in one website ! Yes, even if you want to use custom-made forms ! Yes, it can work with woocommerce register / checkout forms ! The plugin enables you to search, sort, filter, export and manage all your leads in one place. Each lead comes with its own information such as the page and type of form which it was sent from, the date and time etc… For advanced users: You can click on each lead and see more details about the lead and the plugin/form it was sent from. This advanced UI will include all the hidden system fields of the form. Also allows you to hook into the lead data via “action hook” which allows you to easily post leads to CRM , mailing systems etc… Docs and support gb-plugins.com Features ONE CLICK SETUP to activate all forms plugins installed on your website. One DB table collects all leads from all forms in your website. Get Data from Woocommerce register/sign in forms and basically any form. Get Data from custom made forms as well. Manage your leads: Search, sort, delete, filter, export to CSV and more. See any details about your lead: the page it was sent from, the date and time, IP address and much more. Lead Status: New/Viewed. Easy to use and trigger any web hooks. Action hooks to help you transfer your data to any CRM, Mailing system etc… Supported Form Plugins The following Forms Plugins are supported by GB Forms DB – out of the box : Contact form 7 Elementor Gravity forms Ninja forms Custom made forms are also supported. *Any type of form that uses submit post will work with GB Forms DB. *Does not support Ajax-based forms. Translations You can translate GB Forms DB via Poedit
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C