Boldgrid Weforms vulnerabilities

• bold grid weforms WordPress weForms plugin <= 1.6.28 - Arbitrary File Deletion vulnerability CVE-2026-111833 7.5 HighOctober 21, 2026
• boldgrid weforms – easy drag & drop contact form builder for wordpress weForms <= 1.6.28 - Unauthenticated Limited Media File Deletion via 'wpuf_files' Parameter CVE-2026-110253 5.4 MediumOctober 17, 2026
• boldgrid weforms WordPress weForms plugin <= 1.6.26 - PHP Object Injection vulnerability CVE-2026-32484 8.8 HighMarch 25, 2026
• boldgrid weforms – easy drag & drop contact form builder for wordpress weForms <= 1.6.27 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Hidden Field Value via REST API CVE-2026-2707 6.4 MediumMarch 11, 2026
• boldgrid weforms WordPress weForms plugin <= 1.6.25 - Broken Access Control vulnerability CVE-2025-69028 5.3 MediumDecember 30, 2025
• boldgrid weforms WordPress weForms plugin <= 1.6.18 - Broken Access Control vulnerability CVE-2023-51524 4.3 MediumJune 12, 2024
• boldgrid weforms WordPress weForms plugin <= 1.6.20 - Broken Access Control vulnerability CVE-2024-30512 3.7 LowJune 9, 2024
• boldgrid weforms WordPress weForms plugin <= 1.6.20 - Form Submission Restriction Bypass vulnerability CVE-2024-32512 5.3 MediumMay 17, 2024
• weformspro weforms, boldgrid weforms – easy drag & drop contact form builder for wordpress +1 more weForms <= 1.6.21 - Unauthenticated Stored Cross-Site Scripting via Referer CVE-2024-0386 7.2 HighMarch 12, 2024
• boldgrid weforms – easy drag & drop contact form builder for wordpress, weforms – easy drag & drop contact form builder for wordpress, weformspro weforms +2 more WordPress weForms Plugin <= 1.6.17 is vulnerable to Cross Site Scripting (XSS) CVE-2023-50896 5.9 MediumDecember 29, 2023
• weformspro weforms, boldgrid weforms – easy drag & drop contact form builder for wordpress +1 more weForms < 1.6.14 - Admin+ Stored Cross-Site Scripting CVE-2022-2395 4.8 MediumAugust 8, 2022