WP
Product
WPForms Pro
by WPForms · last CVE Aug 21, 2026
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 2Low 0
Watch

Add WPForms Pro to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-7063
6.1
1%
Jan 20
The WPForms Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form submission parameters in all versions up to, and including, 1.8.5.3 due to insufficient…
Affected: through 1.8.5.3
CVE-2023-30500
6.1
0%
Jun 22
WordPress WPForms plugins - Reflected Cross Site Scripting (XSS) vulnerability
Affected: through 1.8.1.2
Showing 2