Approved changes feed: RSS · Atom

cpe:2.3:a:happyforms:happyforms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHappyforms (c4b0fde8-bdfb-5852-8c17-e679e3cf859d)
ProductHappyforms (839860ba-83f0-509a-9d39-fc34a071b963)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/mozilla/happyforms purl2cpe 2026-06-01 10:16:06.911519

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-49768 vulnerable 2026-07-29 00:57:45.541836 WordPress Happyforms plugin <= 1.26.13 - PHP Object Injection vulnerability
CRITICAL (9.8)
Unauthenticated PHP Object Injection in Happyforms <= 1.26.13 versions.
Published: 2026-06-15T20:19:24.982Z
Updated: 2026-06-16T14:42:29.622Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-44063 vulnerable 2026-06-08 06:45:53.529293 WordPress Happyforms plugin <= 1.26.0 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Happyforms allows Stored XSS.This issue affects Happyforms: from n/a through 1.26.0.
Published: 2024-09-15T07:54:07.630Z
Updated: 2026-04-28T16:10:17.321Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23521 vulnerable 2026-06-08 06:29:39.874951 WordPress Happyforms plugin <= 1.25.10 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in Happyforms.This issue affects Happyforms: from n/a through 1.25.10.
Published: 2024-06-11T15:34:46.214Z
Updated: 2026-04-28T16:09:10.090Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.