Wpforms Wpforms Pro
3 CVEs affecting Wpforms Wpforms Pro. Latest disclosed: 2026-07-25. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-10818 | High | 8.1 | 2026-07-25 | The WPForms Pro plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.10.1.1 via the ajax_chunk_upload_finalize f… |
CVE-2023-7063 | High | 7.2 | 2024-01-20 | The WPForms Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form submission parameters in all versions up to, and including, 1.8.5.3… |
CVE-2023-30500 | Medium | 5.8 | 2023-06-22 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPForms WPForms Lite (wpforms-lite), WPForms WPForms Pro (wpforms) plugins <= 1.8.1.2 versions. |