VendorsweFormsProweformsall versions
Vulnerabilities

weFormsPro weForms

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2020-22276
WeForms Wordpress Plugin 1.4.7 allows CSV injection via a form's entry.
Published 2020-11-04 · Modified
9.8EPSS 0.030
CVE-2024-30512
WordPress weForms plugin <= 1.6.20 - Broken Access Control vulnerability
Published 2024-06-09 · Modified
9.1EPSS 0.004
CVE-2023-51524
WordPress weForms plugin <= 1.6.18 - Broken Access Control vulnerability
Published 2024-06-12 · Modified
8.8EPSS 0.003
CVE-2024-0386
weForms <= 1.6.21 - Unauthenticated Stored Cross-Site Scripting via Referer
Published 2024-03-12 · Modified
7.2EPSS 0.006
CVE-2023-50896
WordPress weForms Plugin <= 1.6.17 is vulnerable to Cross Site Scripting (XSS)
Published 2023-12-29 · Modified
5.9EPSS 0.003
CVE-2022-2395
weForms < 1.6.14 - Admin+ Stored Cross-Site Scripting
Published 2022-08-08 · Modified
4.8EPSS 0.006