Google Forms Project Google Forms — known CVE vulnerabilities

Every CVE whose affected-product data names Google Forms Project Google Forms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2018-20988 — CVSS 7.5 (high): The wpgform plugin before 0.94 for WordPress has eval injection in the CAPTCHA calculation.
• CVE-2022-3834 — CVSS 4.8 (medium): The Google Forms WordPress plugin through 0.95 does not sanitise and escape some of its settings, which could allow high privilege users…