Skip to main content

Software intelligence

Advanced Form Integration vulnerabilities

13 tracked advisories · slug advanced-form-integration

Important: Advanced Form Integration appearing in this catalog does not mean your website is affected. Exposure depends on your installed version. How SiteRespond intelligence works

Tracked advisories

13

Latest advisory

27 July 2026

CISA KEV matches

0

In this WordPress feed

WordPress slug

advanced-form-integration

Plugin

What this means for Advanced Form Integration

This catalog lists 13 known advisories affecting Advanced Form Integration. The most recent was published on 27 July 2026. If you use this software, compare your installed version against the affected ranges on each advisory and update to a fixed release outside those ranges. SiteRespond Defence checks your actual installed version when the plugin is connected — listing here does not by itself mean your site is vulnerable.

Latest issues

  • Advanced Form Integration <= 2.6.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary MailUp OAuth Token Overwrite via auth_redirect() Function

    This advisory describes a other issue in the affected software. Review the source advisory and your installed version to assess exposure.

    Published 27 July 2026

  • Advanced Form Integration <= 2.1.0 - Unauthenticated Privilege Escalation

    May allow a lower-privilege user to perform actions reserved for administrators.

    Published 10 June 2026

  • AFI – The Easiest Integration Plugin <= 1.126.12 - Missing Authorization

    This advisory describes a other issue in the affected software. Review the source advisory and your installed version to assess exposure.

    Published 29 April 2026

Vulnerability types

  • Cross-site scripting6
  • SQL injection2
  • Privilege escalation1
  • CSRF1

Authentication (inferred from titles)

  • Unauthenticated1
  • Authenticated6
  • Unspecified6

Advisory history

Known Advanced Form Integration advisories published by month.

All advisories

Check whether your installed version is affected

SiteRespond Defence matches your installed Advanced Form Integration version against this catalog when the Defence plugin is connected to your WordPress site.