WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wpforms-lite
Published
2026-03-23
Title
WPForms < 1.9.9.2 - Unauthenticated Sensitive Information Exposure
Slug
wpforms-lite
Published
2026-03-07
Title
Contact Form by WPForms < 1.9.9.4 - Missing Authorization
Slug
wpforms-lite
Published
2026-03-31
Title
Contact Form by WPForms < 1.10.0.3 - Cross-Site Request Forgery
Slug
wpforms-lite
Published
2026-05-19
Title
WPForms Lite < 1.10.0.5 – Unauthenticated PayPal Webhook Forgery
Slug
wpforms-lite
Published
2026-05-28
Title
WPForms < 1.10.0.5 - Unauthenticated Missing Authorization
Slug
wpforms-lite
Published
2026-06-30
Title
WPForms < 1.10.2.1 - Unauthenticated CRLF Email Header Injection via Reply-To Display Name
Slug
wpforms-lite
Published
2026-07-20
Title
WPForms < 2.0.0.2 - Contributor+ Stored Cross-Site Scripting via OptinMonster Integration
Slug
wpforms-user-registration
Published
2024-07-18
Title
WPForms User Registration < 2.1.2 - Missing Authorization to Authenticated (Contributor+) Privilege Escalation
Slug
wpforo
Published
2018-05-27
Title
wpForo Forum < 1.4.11 - Unauthenticated SQL Injection
Slug
wpforo
Published
2018-06-01
Title
wpForo Forum <= 1.4.11 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
wpforo
Published
2018-09-06
Title
wpForo < 1.5.2 - Privilege Escalation
Slug
wpforo
Published
2021-06-14
Title
wpForo Forum < 1.9.7 - Open Redirect
Slug
wpforo
Published
2020-05-04
Title
wpForo < 1.7.0 - New Users Set as Admin via CSRF
Slug
wpforo
Published
2020-05-04
Title
wpForo < 1.7.0 - Reflected Cross-Site Scripting (XSS) via s Parameter
Slug
wpforo
Published
2020-05-04
Title
wpForo < 1.7.0 - Reflected Cross-Site Scripting (XSS) via langid Parameter
Slug
wpforo
Published
2020-05-04
Title
wpForo < 1.7.0 - Reflected Cross-Site Scripting (XSS) via User Agent
Slug
wpforo
Published
2022-09-08
Title
wpForo Forum < 2.0.6 - Cross-Site Request Forgery
Slug
wpforo
Published
2022-09-26
Title
wpForo Forum < 2.0.6 - Subscriber+ Forum Post Set as Solved/Unsolved via IDOR
Slug
wpforo
Published
2022-11-26
Title
wpForo Forum < 2.0.6 - Subscriber+ Forum Post Set as Private/Public via IDOR
Slug
wpforo
Published
2022-09-26
Title
wpForo Forum < 2.0.6 - Topic Deletion via CSRF
Slug
wpforo
Published
2022-11-09
Title
wpForo Forum < 2.1.0 - Subscriber+ Arbitrary File Upload
Slug
wpforo
Published
2022-11-17
Title
wpForo Forum < 2.1.0 - Arbitrary User Deletion via CSRF
Slug
wpforo
Published
2023-06-12
Title
wpForo Forum < 2.1.8 - Subscriber+ Arbitrary File Read, Author+ PHAR Deserialization, and Subscriber+ Server-Side Request Forgery via file_get_contents
Slug
wpforo
Published
2023-07-03
Title
wpForo Forum < 2.1.9 - Reflected Cross-Site Scripting
Slug
wpforo
Published
2023-11-20
Title
wpForo Forum < 2.2.6 - Subscriber+ Content Injection