Wpforms Pro
Wpforms · 4 CVEs
CVE-2026-18409
HIGH
WPForms Pro <= 2.0.0.2 - Unauthenticated Stored Cross-Site Scripting via Single Line Text and Paragraph Text Field Valu…
Aug 21, 2026
CVE-2026-10818
HIGH
WPForms Pro <= 1.10.1.1 - Unauthenticated Arbitrary File Write via Chunked Upload Init/Finalize Ordering
Jul 25, 2026
CVE-2023-7063
HIGH
The WPForms Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form submission parameters in all…
Jan 20, 2024
CVE-2023-30500
MEDIUM
WordPress WPForms plugins - Reflected Cross Site Scripting (XSS) vulnerability
Jun 22, 2023
CVE-2022-3574
CRITICAL
WPForms Pro < 1.7.7 - CSV Injection
Nov 14, 2022
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-18409 | WPForms Pro <= 2.0.0.2 - Unauthenticated Stored Cross-Site Scripting via Single Line Text and Paragraph Text Field Values | HIGH | 0.34% | Aug 21, 2026 |
| CVE-2026-10818 | WPForms Pro <= 1.10.1.1 - Unauthenticated Arbitrary File Write via Chunked Upload Init/Finalize Ordering | HIGH | 2.48% | Jul 25, 2026 |
| CVE-2023-7063 | The WPForms Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form submission parameters in all versions up to, and including, 1.8.5.3… | HIGH | 0.53% | Jan 20, 2024 |
| CVE-2023-30500 | WordPress WPForms plugins - Reflected Cross Site Scripting (XSS) vulnerability | MEDIUM | 0.40% | Jun 22, 2023 |
| CVE-2022-3574 | WPForms Pro < 1.7.7 - CSV Injection | CRITICAL | 1.41% | Nov 14, 2022 |
Showing 1 to 4 of 4 CVEs