Quill Forms | Conversational Multi Step Forms, Surveys & quizzes

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Quill Forms | Conversational Multi Step Forms, Surveys & quizzes

Information

Software Type Plugin
Software Slug quillforms (view on wordpress.org)
Software Status Active
Software Author mdmag
Software Website www.quillforms.com
Software Downloads 127,400
Software Active Installs 3,000
Software Record Last Updated October 6, 2026

7 Vulnerabilities

Submit a Vulnerability
Quill Forms | Conversational Multi Step Forms, Surveys & quizzes <= 5.7.1 - Unauthenticated Stored Cross-Site Scripting via Multiple Choice 'Other' Value
7.2
CVE-2026-15664
Sep 18, 2026
Researcher: zickzick2
Quill Forms | Conversational Multi Step Forms, Surveys & quizzes <= 5.7.1 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2026-28568
Aug 14, 2026
Researcher: daroo
Quill Forms <= 5.7.1 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2026-75091
Aug 14, 2026
Researcher: daroo
Quill Forms | The Best Typeform Alternative | Create Conversational Multi Step Form, Survey, Quiz, Cost Estimation or Donation Form on WordPress <= 3.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-11826
Jan 6, 2025
Researcher: theviper17y
Quill Forms <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-47393
Sep 30, 2024
Researcher: LVT-tholv2k
Quill Forms <= 3.3.0 - Missing Authorization
5.4
CVE-2023-46610
Oct 24, 2023
Researcher: Abdi Pranata
Quill Forms <= 3.3.0 - Cross-Site Request Forgery
5.4
CVE-2023-46610
Oct 24, 2023
Researcher: Abdi Pranata
Title Status CVE ID CVSS Researchers Date
Quill Forms | Conversational Multi Step Forms, Surveys & quizzes <= 5.7.1 - Unauthenticated Stored Cross-Site Scripting via Multiple Choice 'Other' Value Patched CVE-2026-15664 7.2 zickzick2 September 18, 2026
Quill Forms | Conversational Multi Step Forms, Surveys & quizzes <= 5.7.1 - Unauthenticated Stored Cross-Site Scripting Patched CVE-2026-28568 7.2 daroo August 14, 2026
Quill Forms <= 5.7.1 - Unauthenticated Stored Cross-Site Scripting Patched CVE-2026-75091 7.2 daroo August 14, 2026
Quill Forms | The Best Typeform Alternative | Create Conversational Multi Step Form, Survey, Quiz, Cost Estimation or Donation Form on WordPress <= 3.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2024-11826 6.4 theviper17y January 6, 2025
Quill Forms <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2024-47393 6.4 LVT-tholv2k September 30, 2024
Quill Forms <= 3.3.0 - Missing Authorization Patched CVE-2023-46610 5.4 Abdi Pranata October 24, 2023
Quill Forms <= 3.3.0 - Cross-Site Request Forgery Patched CVE-2023-46610 5.4 Abdi Pranata October 24, 2023

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation