Wpforms

    Dashboard / Vendors

    Products: 6
    Vulnerabilities: 22
    Known Exploited: 0
    1
    Critical Level Threats
    6
    High Level Threats
    14
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-88996

    WPForms <= 2.0.2 - Reflected Cross-Site Scripting via 'page_title' POST Parameter

    Last Modified: Sep 25, 2026
    Published: Sep 25, 2026

    CVE-2026-74991

    WPForms Lite 1.8.8.2 - 2.0.1.1 - Unauthenticated Stripe Refund and Subscription Cancellation via External PaymentIntent

    Last Modified: Sep 24, 2026
    Published: Sep 24, 2026

    CVE-2026-18409

    WPForms Pro <= 2.0.0.2 - Unauthenticated Stored Cross-Site Scripting via Single Line Text and Paragraph Text Field Values

    Last Modified: Aug 21, 2026
    Published: Aug 21, 2026

    CVE-2026-10818

    WPForms Pro <= 1.10.1.1 - Unauthenticated Arbitrary File Write via Chunked Upload Init/Finalize Ordering

    Last Modified: Jul 27, 2026
    Published: Jul 25, 2026

    CVE-2026-4986

    WPForms Lite < 1.10.0.5 – Unauthenticated PayPal Webhook Forgery

    Last Modified: Jun 09, 2026
    Published: Jun 09, 2026
    Items Per Page