Toolset Forms CVEs and Security Vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2026-56069

WordPress Toolset Forms plugin <= 2.6.24 - Insecure Direct Object References (IDOR) vulnerability

Unauthenticated Insecure Direct Object References (IDOR) in Toolset Forms <= 2.6.24 versions.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Site Building With Toolset Wordpress

Products

Toolset Forms Wordpress

Page 1 of 1.