Description
Contributor Cross Site Scripting (XSS) in WPZOOM Forms – Contact Form Plugin for Gutenberg <= 2.0.4 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WPZOOM | WPZOOM Forms – Contact Form Plugin for Gutenberg | ≤ 2.0.4 | — |
Medium · 6.5
CVE-2026-66639
EUVD-2026-60924GHSA-h6x2-x854-wf57
WordPress WPZOOM Forms – Contact Form plugin for Gutenberg plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability
Published Aug 18, 2026 · Updated Aug 18, 2026 · Assigned by Patchstack