Skip to content
Wpforms vulnerabilities
Newest
-
unknown wpforms lite, wpforms lite +1 more
WPForms Lite 1.10.0.1 - 2.0.2.1 - Unauthenticated Payment Bypass via PayPal Commerce
CVE-2026-82844
5.3 Medium
-
wpforms pro
WPForms Pro <= 2.0.0.2 - Unauthenticated Stored Cross-Site Scripting via Single Line Text and Paragraph Text Field Values
CVE-2026-18409
7.2 High
-
wpforms pro
WPForms Pro <= 1.10.1.1 - Unauthenticated Arbitrary File Write via Chunked Upload Init/Finalize Ordering
CVE-2026-10818
Public exploit
8.1 High
-
syed balkhi wpforms
WPForms 1.7.8 - Cross-Site Scripting (XSS)
CVE-2020-36919
5.1 Medium
-
unknown contact form & smtp plugin for wordpress by pirateforms, wpforms contact form +1 more
Contact Form & SMTP Plugin for WordPress by PirateForms < 2.6.0 - Admin+ Stored XSS
CVE-2024-11273
6.1 Medium
-
unknown contact form & smtp plugin for wordpress by pirateforms, wpforms pirate forms +1 more
Contact Form & SMTP Plugin for WordPress by PirateForms < 2.6.0 - Admin+ Stored XSS
CVE-2024-11272
6.1 Medium
-
smub wpforms – easy form builder for wordpress – contact forms, payment forms, surveys, & more, wpforms +1 more
WPForms Lite <= 1.9.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via fieldHTML Parameter
CVE-2024-13403
6.4 Medium
-
syed balkhi contact form by wpforms, wpforms +1 more
WordPress WPForms Lite plugin <= 1.9.2.2 - Broken Access Control vulnerability
CVE-2024-56276
4.3 Medium
-
syed balkhi wpforms
WPForms < 1.9.2.3 - Admin+ Stored XSS
CVE-2024-11223
4.7 Medium
-
wpforms, smub wpforms – easy form builder for wordpress – contact forms, payment forms, surveys, & more +1 more
WPForms 1.8.4 - 1.9.2.1 - Missing Authorization to Authenticated (Subscriber+) Payment Refund and Subscription Cancellation
CVE-2024-11205
8.5 High
-
syed balkhi wpforms
WPForms < 1.9.1.6 - Admin+ Stored XSS
CVE-2024-7056
3.5 Low
-
smub wpforms – easy form builder for wordpress – contact forms, payment forms, surveys, & more, wpforms +1 more
WPForms – Easy Form Builder for WordPress <= 1.9.1.6 - Cross-Site Request Forgery (CSRF) to Plugin's Log Deletion
CVE-2024-10593
4.3 Medium
-
wpforms user registration, wpforms, llc. wpforms user registration +1 more
WordPress WPForms User Registration plugin <= 2.1.0 - Authenticated Privilege Escalation vulnerability
CVE-2023-52209
8.0 High
-
wpforms, wpforms pro +1 more
The WPForms Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form...
CVE-2023-7063
7.2 High
-
wpforms wp mail smtp, wpforms (awesome motive) wp mail smtp pro +1 more
WP Mail SMTP Pro <= 3.8.0 - Missing Authorization to Information Dislcosure via is_print_page
CVE-2023-3213
5.3 Medium
-
wpforms, wpforms lite, pro +1 more +3 more
WordPress WPForms plugins - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2023-30500
5.8 Medium
-
wpforms contact form, smub contact form & smtp plugin for wordpress by pirateforms +1 more
Contact Form & SMTP Plugin by PirateForms <= 2.5.1 - Unauthenticated HTML injection
CVE-2019-25145
7.2 High
-
unknown wpforms pro, wpforms pro +1 more
WPForms Pro < 1.7.7 - CSV Injection
CVE-2022-3574
9.8 Critical
-
wpforms contact form
A stored cross-site scripting (XSS) vulnerability exists in the WPForms Contact Form (aka wpforms...
CVE-2020-10385
Public exploit
5.4 Medium