Known vulnerabilities in awesomemotive Contact Form by WPForms
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-54851 | WordPress Contact Form by WPForms plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability | 7.1 High | Nov 4, 2026 |
| CVE-2026-48835 | Unauthenticated Broken Access Control in Contact Form by WPForms <= 1.10.0.4 versions | 7.5 High | Jun 15, 2026 |