the_innovative_form_builder_ivyforms vulnerabilities

CVEs whose affected-version data names the the_innovative_form_builder_ivyforms package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-109384High· 8.8

6d ago

The Innovative Form Builder <= 1.5.1 - Authenticated (Custom+) Arbitrary File Upload via 'allowedFileExtensions' Configuration + Public /form/submission/ Multipart Upload

The The Innovative Form Builder – IvyForms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.5.1 via the filterFiletypeAndExt function. This is due to insufficient file type validation du…

▾ Twilightmelograno · The Innovative Form Builder – IvyFormsEPSS 0.73%via CVEORG