CF
Product
Contact Form by WPForms
by Syed Balkhi · last CVE Apr 15, 2026
4
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 2Low 0
Watch

Add Contact Form by WPForms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-56276
8.8
0%
Jan 7
WordPress WPForms Lite plugin <= 1.9.2.2 - Broken Access Control vulnerability
Affected: through 1.9.2.2
CVE-2026-40764
8.1
0%
Apr 15
WordPress Contact Form by WPForms plugin <= 1.10.0.2 - Cross Site Request Forgery (CSRF) vulnerability
Affected: through 1.10.0.2
CVE-2026-25339
6.5
0%
Mar 25
WordPress Contact Form by WPForms plugin <= 1.9.8.7 - Sensitive Data Exposure vulnerability
Affected: through 1.9.8.7
CVE-2026-32446
4.3
0%
Mar 13
WordPress Contact Form by WPForms plugin <= 1.9.9.3 - Broken Access Control vulnerability
Affected: through 1.9.9.3
Showing 4