PatchTheCVEwpforms vulnerabilities
Recent CVEs affecting wpforms products. 8 tracked.
wpforms has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 8. Most recent: 2026-01-13. Highest priority: CVE-2024-11205 (score 43/100).
- CVE-2024-7056 LOW 3.5 UPGRADE The WPForms WordPress plugin before 1.9.1.6 does not sanitise and escape some of its settings, which could al
- CVE-2024-56276 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in Syed Balkhi Contact Form by WPForms wpforms-lite allows Exploiting Inco
- CVE-2024-11273 MEDIUM 6.1 UPGRADE The Contact Form & SMTP Plugin for WordPress by PirateForms WordPress plugin before 2.6.0 does not sanitise an
- CVE-2024-11272 MEDIUM 6.1 UPGRADE The Contact Form & SMTP Plugin for WordPress by PirateForms WordPress plugin before 2.6.0 does not sanitise an
- CVE-2024-11223 MEDIUM 4.7 UPGRADE The WPForms WordPress plugin before 1.9.2.3 does not sanitise and escape some of its settings, which could al
- CVE-2024-11205 HIGH 8.5 UPGRADE The WPForms plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabilit
- CVE-2024-10593 MEDIUM 4.3 UPGRADE The WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More plugin for WordP
- CVE-2020-36919 MEDIUM 6.1 UPGRADE WPForms 1.7.8 contains a cross-site scripting vulnerability in the slider import search feature and tab parame
FAQ
How do I fix wpforms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is wpforms being exploited right now?
None of the tracked wpforms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which wpforms CVE should I patch first?
CVE-2024-11205 currently ranks highest (43/100): The WPForms plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabilit.