WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More

5 results · Clear filters · Feed

• Medium 5.3
  CVE-2026-7792

  WPForms <= 1.10.0.4 - Unauthenticated Insufficient Verification of Data Authenticity via PayPal Commerce Webhook Endpoint

  The WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More plugin for WordPress is vulnerable to Insufficient Verification of Data Authenticity in versions up to and including 1.10.0.1. This is due to the PayPal Commerce web…

  smub WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More Web / CMS
  Jun 6, 2026
• Medium 5.4
  CVE-2025-3794

  WPForms Lite <= 1.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'start_timestamp' Parameter

  The WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the start_timestamp parameter in all versions up to, and including, 1.9.5 due to insufficient i…

  smub WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More Web / CMS
  May 9, 2025
• Medium 6.4
  CVE-2024-13403

  WPForms Lite <= 1.9.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via fieldHTML Parameter

  The WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘fieldHTML’ parameter in all versions up to, and including, 1.9.3.1 due to insufficient inp…

  smub WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More Web / CMS
  Feb 4, 2025
• Medium 4.3
  CVE-2024-10593

  WPForms – Easy Form Builder for WordPress <= 1.9.1.6 - Cross-Site Request Forgery (CSRF) to Plugin's Log Deletion

  The WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.9.1.6. This is due to missing or incorrect nonce validation …

  smub WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More Web / CMS
  Nov 13, 2024
• Medium 5.3
  CVE-2024-3649

  Contact Form by WPForms – Drag & Drop Form Builder for WordPress <= 1.8.7.2 - Unauthenticated Price Manipulation

  The Contact Form by WPForms – Drag & Drop Form Builder for WordPress plugin for WordPress is vulnerable to price manipulation in versions up to, and including, 1.8.7.2. This is due to a lack of controls on several product parameters. This makes it possible fo…

  smub WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More Web / CMS
  May 2, 2024