Unknown WPForms
2 known vulnerabilities in Unknown WPForms, with patch priority, exploit likelihood and the news covering them.
Latest vulnerabilities
- CVE-2026-84744 CVSS 6.5 medium The WPForms Lite WordPress plugin from 1.5.0.1 to 2.0.2 does not remove shortcode delimiters from submitted field values before writing…
- CVE-2026-74991 CVSS 6.8 medium The WPForms WordPress plugin before 2.0.2 does not verify that a Stripe payment object supplied during a public form submission belongs to…