HTML Forms – Simple WordPress Forms Plugin
HTML Forms – Simple WordPress Forms Plugin has 9 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2025; all 9 are fixed as of September 2026. Their average CVSS score is 5.7, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 2 high. 2025 was the busiest year with 4 disclosures.
The most common weakness is Cross-Site Scripting, behind 7 of the records (78%). Other recurring categories include Cross-Site Request Forgery (CSRF), SQL Injection.
Every one of the 9 issues recorded for HTML Forms – Simple WordPress Forms Plugin has a vendor fix available, so running the current release closes all known holes.
9 independent researchers contributed these findings, one record each. HTML Forms – Simple WordPress Forms Plugin is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2025-31080HTML Forms <= 1.5.1 - Unauthenticated Stored Cross-Site Scripting
Read the full analysisVulnerability Records

HTML Forms – Simple WordPress Forms Plugin
Author
Link Software LLC
With HTML Forms, you can easily add multi-purpose forms to your WordPress site. The idea behind HTML Forms is different than most other form builder plugins: You manage the form HTML. The plugin manages the PHP and a tiny bit of JavaScript. That’s right. No “intuitive” drag & drop interface. We believe that dynamic form builders can be great, but they also severely limit your options. Also, they’re slow and overly complicated from a technical point of view. HTML Forms aims to be simpler, faster and smarter. It’s the ideal plugin solution for developers looking for a simple way to create a contact form or other HTML form. You define your form fields in HTML and the plugin takes care of submitting the form, saving the data and running a configurable set of form actions. 1. Define your form fields You can use anything that is valid HTML. Just ensure all input elements in your form have a name attribute to save the data entered in that field. 2. Configure your form actions By default, form submissions are automatically saved for you. You can configure several other actions to run when a form is submitted, like sending an email notification or subscribing to Mailchimp. 3. Show the form somewhere on your site Show your form by using the [hf_form] shortcode in your WordPress posts, pages or widget areas. HTML Forms Features Full control over the HTML for the form fields. If you want, we’ll help you in generating the field HTML though. Each form submission is automatically saved in your database and can be viewed in a simple table format. Configure an unlimited amount of actions to run when a form is successfully submitted. For example, sending out email notifications. Access form field values by referencing the field name, eg [NAME] or [EMAIL]. Hide form or redirect to URL after a successful submission. Configurable & translatable form messages. Field validation. Developer friendly. HTML Forms comes with a myriad of JavaScript events and WordPress hooks that allow you to modify or extend the plugin’s default behavior. The Perfect WordPress Form Plugin For Everyone HTML Forms is for everyone that wants a flexible & high performing form solution. Users. Managing your own site? With HTML Forms, you don’t need any technical knowledge to setup a contact form. Developers. Building a site for your client? You supply the form HTML, HTML Forms takes care of validating and processing the form. Theme developers. Shipping a theme? HTML Forms allows for complete blend-in with your theme, and you don’t have to write yet another contact form plugin. With HTML Forms you can create any type of form. A contact form, email form, registration form, price quote form, you name it. For more information, please visit htmlformsplugin.com. HTML Forms Premium HTML Forms Premium is a paid add-on that extends the functionality of the free plugin. It includes: Submission Notifications File Uploads Webhooks Submission Export Submission Limits Require Users to Log In Data and Column Management and more… For additional information, please visit htmlformsplugin.com/premium. Support The HTML Forms knowledge base covers a wide range of frequently asked questions. Use the WordPress.org plugin forums for community support where we try to help all of our users. Contributing You can contribute to HTML Forms in various ways. For example: Write about the plugin on your blog or share it on social media. Translate the plugin into your language using your WordPress.org account.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C