Unknown WPForms vulnerabilities
5 published CVEs name Unknown WPForms among the affected products.
- 5Published CVEs5 of them scored
- 3Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-84744
WPForms Lite 1.5.0.1 - 2.0.2 - Unauthenticated Arbitrary Shortcode Execution via Form Field Repopulation
Unknown · WPForms
Medium6.5 - CVE-2026-74991
WPForms Lite 1.8.8.2 - 2.0.1.1 - Unauthenticated Stripe Refund and Subscription Cancellation via External PaymentIntent
Unknown · WPForms
Medium6.8 - CVE-2026-4986
WPForms Lite < 1.10.0.5 – Unauthenticated PayPal Webhook Forgery
Unknown · WPForms
Medium5.3 - CVE-2024-11223
WPForms < 1.9.2.3 - Admin+ Stored XSS
Unknown · WPForms
Medium4.7 - CVE-2024-7056
WPForms < 1.9.1.6 - Admin+ Stored XSS
Unknown · WPForms
Low3.5