WP
Product
Wpforms
9
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 7Low 1
Watch
Add Wpforms to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-56276 | 8.8 | Jan 7 | WordPress WPForms Lite plugin <= 1.9.2.2 - Broken Access Control vulnerability Affected: before 1.9.2.3 |
| CVE-2024-11205 | 6.5 | Dec 10 | WPForms 1.8.4 - 1.9.2.1 - Missing Authorization to Authenticated (Subscriber+) Payment Refund and Subscription Cancellation Affected: 1.8.4 before 1.9.2.2 |
| CVE-2020-36919 | 6.1 | Jan 13 | WPForms 1.7.8 - Cross-Site Scripting (XSS) Affected: through 1.7.8 |
| CVE-2023-7063 | 6.1 | Jan 20 | The WPForms Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form submission parameters in all versions up to, and including, 1.8.5.3 due to insufficient… Affected: through 1.8.5.3 |
| CVE-2023-30500 | 6.1 | Jun 22 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPForms WPForms Lite (wpforms-lite), WPForms WPForms Pro (wpforms) plugins <= 1.8.1.2 versions Affected: through 1.8.1.2 |
| CVE-2024-13403 | 5.4 | Feb 4 | WPForms Lite <= 1.9.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via fieldHTML Parameter Affected: before 1.9.3.2 |
| CVE-2024-11223 | 4.7 | Dec 26 | WPForms < 1.9.2.3 - Admin+ Stored XSS Affected: before 1.9.2.3 |
| CVE-2024-10593 | 4.3 | Nov 13 | WPForms – Easy Form Builder for WordPress <= 1.9.1.6 - Cross-Site Request Forgery (CSRF) to Plugin's Log Deletion Affected: before 1.9.2.1 |
| CVE-2024-7056 | 3.5 | Nov 25 | WPForms < 1.9.1.6 - Admin+ Stored XSS Affected: before 1.9.1.6 |
Showing 9