Skip to contentSyed Balkhi Wpforms vulnerabilities
- awesomemotive contact form by wpformsWordPress Contact Form by WPForms plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-548517.1 High
- syed balkhi wpformsWPForms Lite 1.5.0.1 - 2.0.2 - Unauthenticated Arbitrary Shortcode Execution via Form Field RepopulationCVE-2026-847446.5 Medium
- syed balkhi wpformsWPForms Lite 1.8.8.2 - 2.0.1.1 - Unauthenticated Stripe Refund and Subscription Cancellation via External PaymentIntentCVE-2026-749916.8 Medium
- awesomemotive contact form by wpformsWordPress Contact Form by WPForms plugin <= 1.10.0.4 - Broken Access Control vulnerabilityCVE-2026-488357.5 High
- syed balkhi wpformsWPForms Lite < 1.10.0.5 – Unauthenticated PayPal Webhook ForgeryCVE-2026-49865.3 Medium
- syed balkhi contact form by wpformsWordPress Contact Form by WPForms plugin <= 1.10.0.2 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2026-407648.1 High
- syed balkhi contact form by wpformsWordPress Contact Form by WPForms plugin <= 1.9.8.7 - Sensitive Data Exposure vulnerabilityCVE-2026-253396.5 Medium
- syed balkhi contact form by wpformsWordPress Contact Form by WPForms plugin <= 1.9.9.3 - Broken Access Control vulnerabilityCVE-2026-324464.3 Medium
- syed balkhi wpformsWPForms 1.7.8 - Cross-Site Scripting (XSS)CVE-2020-369195.1 Medium
- syed balkhi contact form by wpforms, wpforms +1 moreWordPress WPForms Lite plugin <= 1.9.2.2 - Broken Access Control vulnerabilityCVE-2024-562764.3 Medium
- syed balkhi wpformsWPForms < 1.9.2.3 - Admin+ Stored XSSCVE-2024-112234.7 Medium
- syed balkhi wpformsWPForms < 1.9.1.6 - Admin+ Stored XSSCVE-2024-70563.5 Low