Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More — Vulnerabilities & Security Advisories 5

All 5 CVE vulnerabilities found in WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More, with AI-generated Chinese analysis, references, and POCs.

Vendor: smub

CVE IDTitleCVSSSeverityPublished
CVE-2025-3794 WPForms Lite <= 1.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'start_timestamp' Parameter CWE-79 5.4 Medium2025-05-09
CVE-2024-13403 WPForms Lite <= 1.9.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via fieldHTML Parameter CWE-79 6.4 Medium2025-02-04
CVE-2024-11205 WPForms 1.8.4 - 1.9.2.1 - Missing Authorization to Authenticated (Subscriber+) Payment Refund and Subscription Cancellation CWE-862 8.5 High2024-12-10
CVE-2024-10593 WPForms – Easy Form Builder for WordPress <= 1.9.1.6 - Cross-Site Request Forgery (CSRF) to Plugin's Log Deletion CWE-352 4.3 Medium2024-11-13
CVE-2024-3649 Contact Form by WPForms – Drag & Drop Form Builder for WordPress <= 1.8.7.2 - Unauthenticated Price Manipulation CWE-472 5.3 Medium2024-05-02

All 5 known CVE vulnerabilities affecting WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More with full Chinese analysis, references, and POCs where available.