Plugin icon

WS Form LITE – Drag & Drop Contact Form Builder

ws-form

Vulnerabilities:

8

Last Updated:

May 21, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2025-04-24
Title
WS Form LITE – Drag & Drop Contact Form Builder for WordPress < 1.10.36 - Missing Authorization to Unauthenticated Sensitive Information Exposure
Fixed in
Fixed in 1.10.36
CVSS
5.3 (medium)
Published
2025-01-27
Title
WS Form LITE and PRO <= 1.10.13 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 1.10.14
CVSS
7.2 (high)
Published
2024-11-05
Title
WS Form LITE – Drag & Drop Contact Form Builder for WordPress < 1.9.245 - Reflected Cross-Site Scripting via URL
Fixed in
Fixed in 1.9.245
CVSS
6.1 (medium)
Published
2024-09-25
Title
WS Form LITE < 1.9.244 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 1.9.244
CVSS
6.1 (medium)
Published
2024-06-06
Title
WS Form LITE <= 1.9.217 - Unauthenticated CSV Injection
Fixed in
Fixed in 1.9.218
CVSS
4.7 (medium)
Published
2023-12-28
Title
WS Form LITE < 1.9.171 - Authenticated(Administrator+) SQL Injection
Fixed in
Fixed in 1.9.171
CVSS
6.6 (medium)
Published
2022-01-31
Title
WS Form < 1.8.176 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 1.8.176
CVSS
8.8 (high)
Published
2022-01-31
Title
WS Form < 1.8.176 - Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 1.8.176
CVSS
3.4 (low)