WPScan
How it worksPricing
Vulnerabilities
WordPressPluginsThemesStatsSubmit vulnerabilities
For developers
StatusAPI detailsCLI scanner
Contact

WordPress Plugin Vulnerabilities

Contact Form by WPForms – Drag & Drop Form Builder for WordPress

2022-09-19
Contact Form by WPForms < 1.7.5.5 - Admin+ Arbitrary File Access
Fixed in version 1.7.5.5
2020-07-01
Contact Form by WPForms < 1.6.0.2 - Authenticated Stored Cross-Site Scripting (XSS)
Fixed in version 1.6.0.2
2020-03-05
Contact Form by WPForms < 1.5.9 - Authenticated Cross-Site Scripting (XSS)
Fixed in version 1.5.9
2018-12-10
Contact Form by WPForms < 1.4.8.1 - Unauthenticated Cross-Site Scripting (XSS)
Fixed in version 1.4.8.1
2018-12-02
Contact Form by WPForms < 1.4.8 - Authenticated Stored Cross-Site Scripting (XSS)
Fixed in version 1.4.8