Skip to content
OpenAdvisories
Medium · 5.8 CVE-2023-30500 EUVD-2023-34915GHSA-x8mx-9h73-r584

WordPress WPForms plugins - Reflected Cross Site Scripting (XSS) vulnerability

Published Jun 22, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPForms WPForms Lite (wpforms-lite), WPForms WPForms Pro (wpforms) plugins <= 1.8.1.2 versions.

Affected products

VendorProductAffectedFixed
WPForms WPForms Lite ≤ 1.8.1.2 —
WPForms WPForms Pro ≤ 1.8.1.2 —

References