| CVE-2026-84744 |
The WPForms Lite WordPress plugin from 1.5.0.1 to 2.0.2 does not remove shortcode delimiters from submitted field values…
|
6.5
Medium
|
Sep 28, 2026 |
| CVE-2026-74991 |
The WPForms WordPress plugin before 2.0.2 does not verify that a Stripe payment object supplied during a public form…
|
6.8
Medium
|
Sep 24, 2026 |
| CVE-2026-4986 |
The WPForms WordPress plugin before 1.10.0.5 does not verify the authenticity of incoming PayPal webhook events…
|
5.3
Medium
|
Jun 9, 2026 |
| CVE-2024-11223 |
The WPForms WordPress plugin before 1.9.2.3 does not sanitise and escape some of its settings, which could allow high…
|
4.7
Medium
|
Dec 26, 2024 |
| CVE-2024-7056 |
The WPForms WordPress plugin before 1.9.1.6 does not sanitise and escape some of its settings, which could allow high…
|
3.5
Low
|
Nov 25, 2024 |