Vulnerabilities / Advanced Form Integration
Advanced Form Integration vulnerabilities
Advisories WPSec published for Advanced Form Integration — Connect Forms to 300+ Apps. Other sources may list more. Its attack surface: Advanced Form Integration on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-22 | WPSEC-2026-1464 | Advanced Form Integration <= 2.10.3 - Unauthenticated Arbitrary Shortcode Execution via Form Submission Values | High 7.3 | 2.10.4 |
| 2026-10-12 | WPSEC-2026-0778 | Advanced Form Integration <= 2.10.0 - Unauthenticated PHP Object Injection via Nex-Forms Submission Fields | High 8.1 | 2.10.3 |
| 2026-10-04 | WPSEC-2026-0412 | Advanced Form Integration <= 2.9.0 - Unauthenticated Privilege Escalation via Account Takeover in Ultimate Member 'Update Profile Field' Action | High 8.1 | 2.10.0 |
License: CC BY 4.0