CVE Database /
CVE-2026-11567
CVE
CVE-2026-11567 — SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz [sureforms] < 2.11.1
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2026-11567
|
SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz [sureforms] < 2.11.1 |
Improper Access Control |
Unknown
|
< 2.11.1
|
2.11.1 |
2026-06-23 |
—
|
CVE-2026-11567
The SureForms WordPress plugin before 2.11.1 does not properly validate the payment amount on forms that use a dynamically-sourced (variable/hidden) payment amount, allowing unauthenticated users to underpay for the configured product or subscription. Forms using a fixed configured price are not affected.
Source:
CVE.org
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings