Optinlyhq Gozen Forms — known CVE vulnerabilities

Every CVE whose affected-product data names Optinlyhq Gozen Forms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2025-6782 — CVSS 7.5 (high): The GoZen Forms plugin for WordPress is vulnerable to SQL Injection via the 'forms-id' parameter of the dirGZActiveForm() function in all…
• CVE-2025-6783 — CVSS 7.5 (high): The GoZen Forms plugin for WordPress is vulnerable to SQL Injection via the 'forms-id' parameter of the emdedSc() function in all versions…