WP
Product
WPForms
5
CVEs
0
On KEV
6.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 4Low 1
Watch
Add WPForms to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-74991 | 6.8 | Sep 24 | WPForms Lite 1.8.8.2 - 2.0.1.1 - Unauthenticated Stripe Refund and Subscription Cancellation via External PaymentIntent Affected: 1.8.8.2 before 2.0.2 |
| CVE-2026-84744 | 6.5 | Sep 28 | WPForms Lite 1.5.0.1 - 2.0.2 - Unauthenticated Arbitrary Shortcode Execution via Form Field Repopulation Affected: 1.5.0.1 before 2.0.2.1 |
| CVE-2026-4986 | 5.3 | Jun 9 | WPForms Lite < 1.10.0.5 – Unauthenticated PayPal Webhook Forgery Affected: 1.10.0.1 before 1.10.0.5 |
| CVE-2024-11223 | 4.7 | Dec 26 | WPForms < 1.9.2.3 - Admin+ Stored XSS Affected: before 1.9.2.3 |
| CVE-2024-7056 | 3.5 | Nov 25 | WPForms < 1.9.1.6 - Admin+ Stored XSS Affected: before 1.9.1.6 |
Showing 5