CVE Database /
CVE-2025-12536
CVE · Medium
CVE-2025-12536 — SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz [sureforms] < 1.13.2
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2025-12536
|
SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz [sureforms] < 1.13.2 |
Exposure of Private Personal Information to an Unauthorized Actor |
Medium
5.3
|
< 1.13.2
|
1.13.2 |
2025-11-12 |
—
|
CVE-2025-12536
The SureForms plugin for WordPress has a security flaw in versions up to 1.13.1. This issue arises from the way email notifications are configured, allowing unauthorized access to sensitive information through post meta registration. Unverified users can exploit this vulnerability by obtaining email notification settings that may contain vendor-provided addresses and other configuration details.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings