Medium · 5.4 CVE-2022-36791 EUVD-2022-39491GHSA-j78f-66qm-2mcw

WordPress Torro Forms plugin <= 1.0.16 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Published Sep 23, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Awesome UG Torro Forms plugin <= 1.0.16 at WordPress.

Vendor	Product	Affected	Fixed
Awesome UG	Torro Forms (WordPress plugin)	<= 1.0.16 – ≤ 1.0.16	—