Skip to content
smub WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More
-
CVE-2026-101921
Medium 4.7
WPForms <= 2.0.2.1 - Reflected Cross-Site Scripting via 'query_var' Smart Tag in iframe srcdoc Attribute
0.3%
-
CVE-2026-88996
Medium 6.1
WPForms <= 2.0.2 - Reflected Cross-Site Scripting via 'page_title' POST Parameter
0.4%
-
CVE-2026-15782
Medium 4.9
WPForms <= 2.0.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via OptinMonster Integration data-sitekey Attribute in Post Content
0.3%
-
CVE-2026-12127
Medium 5.3
WPForms <= 1.10.2 - Improper Neutralization of CRLF Sequences to Unauthenticated Email Header Injection via Reply-To Display Name
0.6%