Skip to content
OpenAdvisories

Vendor

WS Form

5 known vulnerabilities.

Products

WS Form Pro 4 WS Form LITE – Drag & Drop Contact Form Builder for WordPress 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2024-13509

    WS Form LITE and PRO <= 1.10.13 - Unauthenticated Stored Cross-Site Scripting

    The WS Form LITE and PRO plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the url parameter in all versions up to, and including, 1.10.13 due to insufficient input sanitization and output escaping. This makes it possible for unauthentic…

    westguard WS Form WS Form LITE – Drag & Drop Contact Form Builder WS Form Pro
  • High 7.6
    CVE-2023-52135

    WordPress WS Form LITE Plugin <= 1.9.170 is vulnerable to SQL Injection

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WS Form WS Form LITE – Drag & Drop Contact Form Builder for WordPress.This issue affects WS Form LITE – Drag & Drop Contact Form Builder for WordPress: from …

    WS Form WS Form LITE – Drag & Drop Contact Form Builder for WordPress Web / CMS