Known Vulnerabilities for WPForms by Unknown
Listed below are 10 of the newest known vulnerabilities associated with "WPForms" by "Unknown".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-105260 json | The Database Addon For WPForms ( wpforms entries ) WordPress plugin before 1.1.1 does not verify the CSRF nonce when the fie... | Not Provided | 2026-10-08 | 2026-10-08 |
| CVE-2026-101921 json | The WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More plugin for WordPress... | Not Provided | 2026-10-10 | 2026-10-11 |
| CVE-2026-88996 json | The WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More plugin for WordPress... | Not Provided | 2026-09-25 | 2026-09-25 |
| CVE-2026-84744 json | The WPForms Lite WordPress plugin from 1.5.0.1 to 2.0.2 does not remove shortcode delimiters from submitted field values befo... | Not Provided | 2026-09-28 | 2026-09-28 |
| CVE-2026-84259 json | The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not sanitise and escape content submitted through an una... | Not Provided | 2026-10-11 | 2026-10-11 |
| CVE-2026-84252 json | The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not have authorisation and CSRF checks when updating opt... | Not Provided | 2026-10-11 | 2026-10-11 |
| CVE-2026-82844 json | The WPForms Lite WordPress plugin before 2.0.2.2 does not verify server-side that a payment was completed before accepting a ... | Not Provided | 2026-10-14 | 2026-10-14 |
| CVE-2026-82627 json | The Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included plugin for WordPr... | Not Provided | 2026-10-08 | 2026-10-08 |
| CVE-2026-74991 json | The WPForms WordPress plugin before 2.0.2 does not verify that a Stripe payment object supplied during a public form submiss... | Not Provided | 2026-09-24 | 2026-09-24 |
| CVE-2026-54851 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Awesomemotive Contact F... | Not Provided | 2026-11-04 | 2026-11-04 |