PT-2025-39146 · WordPress · Sureforms

Dmitry Ignatyev · Published 2025-09-23 · Updated 2025-09-23 · CVE-2025-8282

Positive Technologies (AI Summary)

CVSS v3.1

3.5

Low

Base vector

AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SureForms WordPress plugin versions prior to 1.9.1

Description The SureForms WordPress plugin does not properly sanitize and escape parameters when displaying them on a page. This could allow administrators and users with higher privileges to carry out Cross-Site Scripting attacks.

Recommendations Update the SureForms WordPress plugin to version 1.9.1 or later.

Exploit

Fix

Related Identifiers

CVE-2025-8282

Affected Products

Sureforms

References · 5

• 🔥 https://wpscan.com/vulnerability/62680106-1313-4ef0-80a5-33e93b4221a1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-8282 · Security Note
• https://twitter.com/VulmonFeeds/status/1970500925904031798 · Twitter Post
• https://twitter.com/CVEnew/status/1970393446331338908 · Twitter Post
• https://t.me/CVEtracker/33144 · Telegram Post