BoldGrid weForms – Easy Drag & Drop Contact Form Builder For WordPress

• CVE-2026-110253 Medium 5.4 weForms <= 1.6.28 - Unauthenticated Limited Media File Deletion via 'wpuf_files' Parameter 0.3%
• CVE-2026-2707 Medium 6.4 weForms <= 1.6.27 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Hidden Field Value via REST API 0.2%
• CVE-2024-0386 High 7.2 weForms <= 1.6.21 - Unauthenticated Stored Cross-Site Scripting via Referer 0.6%