CF
Product
Contact Form
by Wpforms · last CVE Mar 25, 2025
4
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 4Low 0
Watch

Add Contact Form to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-11273
6.1
0%
Mar 25
Contact Form & SMTP Plugin for WordPress by PirateForms < 2.6.0 - Admin+ Stored XSS
Affected: before 2.6.0
CVE-2023-30500
6.1
0%
Jun 22
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPForms WPForms Lite (wpforms-lite), WPForms WPForms Pro (wpforms) plugins <= 1.8.1.2 versions
Affected: through 1.8.1.2
CVE-2019-25145
6.1
1%
Jun 7
The Contact Form & SMTP Plugin by PirateForms plugin for WordPress is vulnerable to HTML injection in the ‘public/class-pirateforms-public.php’ file in versions up to, and…
Affected: through 2.5.1
CVE-2020-10385
5.4
4%
Mar 24
A stored cross-site scripting (XSS) vulnerability exists in the WPForms Contact Form (aka wpforms-lite) plugin before 1.5.9 for WordPress
Affected: before 1.5.9
Showing 4