PLUGIN SECURITY
Build fast and powerful contact forms in WordPress with an intuitive drag-and-drop builder packed with smart features.
formlayercontact formcustom formformsforms builder
1 known CVE on file for FormLayer. Reported between 2026 and 2026.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-59519 | FormLayer [formlayer] < 1.0.7 | Insertion of Sensitive Information Into Sent Data | Medium 5.3 | < 1.0.7 | 1.0.7 | 2026-07-05 | — |
<p>WordPress FormLayer Plugin <= 1.0.6 is vulnerable to Sensitive Data Exposure</p><p>Software: FormLayer</p><p>Link: https://wordpress.org/support/plugin/formlayer/</p><p>Fixed in version 1.0.7 </p><p>Affected Version <= 1.0.6</p><p>CVE: CVE-2026-59519</p>
Source: Patchstack
Update this plugin to the latest release from wordpress.org — each CVE above lists the exact release that fixed it ("Fixed in") when one is on file.
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.