Skip to content
smub WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More
-
CVE-2026-7792
Medium 5.3
WPForms <= 1.10.0.4 - Unauthenticated Insufficient Verification of Data Authenticity via PayPal Commerce Webhook Endpoint
0.3%
-
CVE-2025-3794
Medium 5.4
WPForms Lite <= 1.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'start_timestamp' Parameter
0.3%
-
CVE-2024-13403
Medium 6.4
WPForms Lite <= 1.9.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via fieldHTML Parameter
0.4%
-
CVE-2024-11205
High 8.5
WPForms 1.8.4 - 1.9.2.1 - Missing Authorization to Authenticated (Subscriber+) Payment Refund and Subscription Cancellation
0.7%
-
CVE-2024-10593
Medium 4.3
WPForms – Easy Form Builder for WordPress <= 1.9.1.6 - Cross-Site Request Forgery (CSRF) to Plugin's Log Deletion
0.3%
-
CVE-2024-3649
Medium 5.3
Contact Form by WPForms – Drag & Drop Form Builder for WordPress <= 1.8.7.2 - Unauthenticated Price Manipulation
0.7%