CVE-2022-43459: Captainform

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) vulnerability in Forms by CaptainForm – Form Builder for WordPress plugin <= 2.5.3 versions.

Affected products

• Captainform Captainform: up to and including 2.5.3

Published 2023-02-28. Last modified 2026-06-17.