Known vulnerabilities in WPForms Pro
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-18409 | The WPForms Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Single Line Text and Paragraph… | 7.2 High | Aug 21, 2026 |
| CVE-2026-10818 | The WPForms Pro plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including,… | 8.1 High | Jul 25, 2026 |
| CVE-2023-7063 | The WPForms Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form submission parameters in… | 7.2 High | Jan 20, 2024 |
| CVE-2023-30500 | Unauth | 5.8 Medium | Jun 22, 2023 |