Mega Forms – Drag & Drop Form Builder with Multi-Step & Conditional Logic

Mega Forms – Drag & Drop Form Builder with Multi-Step & Conditional Logic has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2025; all 3 are fixed as of September 2026. Their average CVSS score is 5.6, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include Missing Authorization.

Every one of the 3 issues recorded for Mega Forms – Drag & Drop Form Builder with Multi-Step & Conditional Logic has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. Mega Forms – Drag & Drop Form Builder with Multi-Step & Conditional Logic is installed on roughly 200 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
5.6/ 10
Patch Coverage100%
Open

0

Fixed

3

Get automatic notifications for all Mega Forms – Drag & Drop Form Builder with Multi-Step & Conditional Logic vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2022-40191

Contact Form By Mega Forms <= 1.2.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

3 records
Mega Forms – Drag & Drop Form Builder with Multi-Step & Conditional Logic banner
Latestv1.7.8

Mega Forms – Drag & Drop Form Builder with Multi-Step & Conditional Logic

Ali Khallad

Author

Ali Khallad

5.0(12)
100/100
Last Updated
2026-08-08 (1mo ago)
Active Installs
200+
Downloads
13,396
Requires WP
5.0+
Requires PHP
7.4+
Tested up to
WP 7.0.4
Created
2020-12-23 (6y ago)

Mega Forms is highly advanced contact form builder for WordPress, it comes with all the contact form features you will ever need, including AJAX submission, multi-page contact forms, secure file uploads, conditional logic, save and continue, user creation, front end posting, and tons more. You can use Mega Forms to save time, grow customer interaction, and build better contact forms for any purpose. Mega Forms gives you a modern interface, easy customization, and the ability to build modern & professional forms thanks to our intuitive drag & drop visual editor. Now you can create better forms, embed them anywhere on your WordPress website, get email notification for each submission, perform custom tasks, and collect & manage data without being a coding ninja. Mega Forms contact forms are also highly optimized for web and server performance. We know how important speed is when it comes to SEO and user experience, that’s why we have built every piece of Mega Forms with performance and usability in mind. Mega Forms will load the least possible amount of CSS & JS assets, and only store necessary data to the database to keep your website fast and provide your users with better experience. No Coding Skills Required No technical skill? No problem. You can easily design simple and complex forms with our highly advanced visual builder. Mega Forms offers a flexible row/column layout system that requires very minimal effort to build forms that blends nicely with your website design. Developer Friendly Mega Forms has been built with developers in mind. This means it’s flexible, easily extendable, and full of action and filter hooks, making it easy to customize to your own needs. Top Features Mega Forms comes with a visual editor and ton of other features: Intuitive user interface Drag & drop form builder Optimized for speed & performance Tons of free field types ( text, select, radio, checkboxes and more ) Regular updates & dedicated support Fully responsive & mobile friendly Unlimited forms & form submission Merge tags support Multi-steps support Conditional logic support ( for fields, form notifications and more ) Save And Continue Later support Front end posting & User creation Export and import forms Export entries Customizable templates Full control ( styles, email templates, field templates and more ) Developer friendly Highly effective Anti-spam system ( invisible to users ) reCaptcha support Available Extensions ( third-party ) The following extensions above are provided by third-party developers, we do not manage or support these extensions. Local captcha by MobiCMS: Integrates a local captcha by MobiCMS into Mega Forms.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C