Skip to content
OpenAdvisories

Vendor

westguard

6 known vulnerabilities.

Products

WS Form LITE – Drag & Drop Contact Form Builder 6
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-3912

    WS Form LITE – Drag & Drop Contact Form Builder for WordPress <= 1.10.35 - Missing Authorization to Unauthenticated Sensitive Information Exposure

    The WS Form LITE – Drag & Drop Contact Form Builder for WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_config' function in all versions up to, and including, 1.10.35. This makes it pos…

    westguard WS Form LITE – Drag & Drop Contact Form Builder Web / CMS
  • Medium 6.1
    CVE-2024-10647

    WS Form LITE – Drag & Drop Contact Form Builder for WordPress <= 1.9.244 - Reflected Cross-Site Scripting via URL

    The WS Form LITE – Drag & Drop Contact Form Builder for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.9.244. Th…

    westguard WS Form LITE – Drag & Drop Contact Form Builder Web / CMS
  • Medium 4.7
    CVE-2023-5424

    WS Form LITE <= 1.9.217 - Unauthenticated CSV Injection

    The WS Form LITE plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.9.217. This allows unauthenticated attackers to embed untrusted input into exported CSV files, which can result in code execution when these files are dow…

    westguard WS Form WS Form LITE – Drag & Drop Contact Form Builder WS Form Pro Web / CMS