#simpleform
CVE-2026-118235 - simpleform – form maker to chat apps with quiz, poll and multi lead notifications
The SimpleForm form‑maker plugin for WordPress (up to version 3.10.2) does not properly check uploaded file names,…

Too many irrelevant or confusing CVEs? Use stackflag.com

#wpazleen #CVE #infosec
CVE-2026-118235: SimpleForm plugin lets anyone upload malicious files
The SimpleForm form‑maker plugin for WordPress (up to version 3.10.2) does not properly check uploaded file names, so a visitor can upload a file with a.
stackflag.com
November 1, 2026 at 5:30 AM
🔴 CVE-2026-118235 - Critical (9.8)

The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin fo...

https://www.thehackerwire.com/vulnerability/CVE-2026-118235/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack
October 31, 2026 at 10:15 AM
CVE-2026-118235: SimpleForm for WordPress ≤3.10.2 has a CRITICAL file upload flaw — remote code execution possible by unauthenticated actors. Remove or restrict plugin use until fix. Details: https://radar.offseq.com/threat/the-simpleform-form-maker-to-chat-apps-with-quiz-poll-and-multi-lead-noti...
The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifica
The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to arbitrary file upload in all versions up to and including 3.10.2. The vulnerability is due to missing server-side fi
radar.offseq.com
October 31, 2026 at 11:00 AM
CVE-2026-118235. CVSS 9.8. SimpleForm plugin bleeds wp-config, database dumps, private files. No auth required. Any visitor exploits it.

Update to 3.10.2 now.

Scan your WordPress site: pulse-wp.com
#WordPress #RCE #CyberSecurity
November 2, 2026 at 12:00 AM
🚨 CVE-2026-118235 — CVSS 9.8 CRITICAL

The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress ...

🔎 https://stemshop.top/cve/CVE-2026-118235

#CVE #CyberSecurity #InfoSec
October 31, 2026 at 10:07 AM
🚨 EUVD-2026-114672
📊 9.8/10
🏢 wpazleen

📝 The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Arbitrary File Upload in al...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-114672

#cybersecurity #infosec #cve #euvd
October 31, 2026 at 10:02 AM
🚨 CVE-2026-118235
CVSS 9.8 / EPSS 0.74% / KEV: No
TL;DR: The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up…
https://cvesentinel.com/report/CVE-2026-118235
#infosec #CVE #vulnerability
November 1, 2026 at 4:57 PM
October 18, 2026 at 3:01 AM
WordPress SimpleForm 3.10.0 Unauthenticated Privilege Escalation https://packetstorm.news/files/235620 #exploit
October 14, 2026 at 9:49 PM
CVE-2026-104748 - simpleform – form maker to chat apps with quiz, poll and multi lead notifications
The SimpleForm form‑maker plugin for WordPress (versions up to 3.10.0) allows anyone on the internet to register a…

Too many irrelevant or confusing CVEs? Use stackflag.com

#wpazleen #CVE #infosec
CVE-2026-104748: SimpleForm plugin lets anyone create admin account
The SimpleForm form‑maker plugin for WordPress (versions up to 3.10.0) allows anyone on the internet to register a new user with administrator rights.
stackflag.com
October 14, 2026 at 8:50 AM
CVE-2026-104748: CRITICAL in SimpleForm WordPress plugin (<=3.10.0) — unauthenticated attackers can create admin accounts via exposed AJAX endpoint. Disable or restrict plugin use until patched. https://radar.offseq.com/threat/cve-2026-104748-cwe-269-improper-privilege-management-in-wpazleen-simp...
CVE-2026-104748: CWE-269 Improper Privilege Management in wpazleen SimpleForm –
CVE-2026-104748 is a critical privilege escalation vulnerability in the SimpleForm WordPress plugin (versions up to and including 3.10.0). The vulnerability stems from the `wp_ajax_nopriv_simpleform_wp_register` AJAX action lacking any capa
radar.offseq.com
October 14, 2026 at 10:30 AM
🚨 CVE-2026-104748 — CVSS 9.8 CRITICAL

The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress ...

🔎 https://stemshop.top/cve/CVE-2026-104748

#CVE #CyberSecurity #InfoSec
October 14, 2026 at 10:07 AM
🚨 EUVD-2026-100911
📊 9.8/10
🏢 wpazleen

📝 The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Privilege Escalation in all...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100911

#cybersecurity #infosec #cve #euvd
October 14, 2026 at 9:02 AM
Four Simpleform Engineers Certified as 2026 Japan AWS All Certifications Engineers

Yuki Yamagishi is the only Simpleform engineer to earn the 2026 Japan AWS All Certifications Engineers award for a second straight year, as the company's total jumps from one to four.
June 25, 2026 at 8:56 AM
Getting NitroKit form fields close to SimpleForm level simplicity.

The `field` helper makes it easy to make forms look decent with very little work
November 18, 2024 at 10:13 PM
If you're not using simple_form yet, you're missing out!

You can just built forms with pure ERB and 0 HTML/CSS.

Here's how you can use simple_form with TailwindCSS 👇

www.youtube.com/watch?v=DrUS...
Gem SimpleForm - the ultimate component library for Ruby on Rails forms. Episode 242
YouTube video by SupeRails
www.youtube.com
November 24, 2025 at 3:00 PM
Affordable compliance matters. E-file #IRSForm2290 starting at $9.95 — that’s lower than the price of your lunch. Save time and cost with #SimpleForm.

www.simpleform2290.com/blog/irs-for...
December 22, 2025 at 3:16 PM
A training on characters with basic shapes. It's always good to practice old things
#Practice #drawing #simpleform #Digimon #Pokemon #fanart
February 13, 2025 at 7:24 AM
<a href="https://zenn.dev/simpleform_blog/articles/bff4e1a0286934" class="hover:underline text-blue-600 dark:text-sky-400 no-card-link" target="_blank" rel="noopener" data-link="bsky">zenn.dev/simpleform...
GitHub Actions のワナ仕様

- 複数行runのYAML記法、|と>
- composite actionのenv定義は、呼び出し元からの受け渡し
- Reusable workflowでsecretを使う場合はsecrets: inherit指定
GitHub Actions のワナ仕様
はじめに GitHub Actions (GHA)、便利ですよね。 便利なんですが、たまに「え、そんな仕様だっけ?」みたいなワナに遭遇します。そして毎回忘れてワナにハマってしまいます。 今後そんなワナにハマって時間を無駄にしないよう、ワナ仕様について網羅していきます。 対象読者 GitHub Actions…
zenn.dev
February 24, 2025 at 9:05 AM
<a href="https://zenn.dev/simpleform_blog/articles/110df88dc2933b" class="hover:underline text-blue-600 dark:text-sky-400 no-card-link" target="_blank" rel="noopener" data-link="bsky">zenn.dev/simpleform...
自作キーボードで遊んじゃおう!
自作キーボードで遊んじゃおう!
Go tinygo tech この記事はSimpleForm Advent Calendar 2024 16日目の記事です。 https://qiita.com/advent-calendar/2024/simpleform…
zenn.dev
December 23, 2024 at 6:26 AM
<a href="https://zenn.dev/simpleform_blog/articles/2b030b5f9e842c" class="hover:underline text-blue-600 dark:text-sky-400 no-card-link" target="_blank" rel="noopener" data-link="bsky">zenn.dev/simpleform...
ローカルで GitHub Actions が実行できる act のお作法を整理する
ローカルで GitHub Actions が実行できる act のお作法を整理する
はじめに GitHub Actions (GHA) 、便利ですね。 便利なんですが、動作確認するのに PR 出してマージするのが煩わしい...。そもそも PR する前に動作確認しておきたいし、やたらに PR 作りたくもない...。 そんな悩みを解消してくれるのが act でした。これならローカルで動作確認できるので…
zenn.dev
May 3, 2024 at 7:34 AM
ID: CVE-2024-10884
CVSS V3.1: MEDIUM
The SimpleForm Contact Form Submissions plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all versions up to,...
#security #infosec #cve-alert
nvd.nist.gov
November 16, 2024 at 4:15 AM
ID: CVE-2024-10883
CVSS V3.1: MEDIUM
The SimpleForm – Contact form made simple plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all versions up to,...
#security #infosec #cve-alert
nvd.nist.gov
November 16, 2024 at 4:15 AM