Vulnerabilities / Forms
Forms vulnerabilities
Advisories WPSec published for Forms. Other sources may list more. Its attack surface: Forms on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-07 | WPSEC-2026-0554 | Forms <= 3.0.2 - Authenticated (Subscriber+) Missing Authorization to Form and Submission Data Exposure | Medium 4.3 | 3.0.3 |
| 2026-10-01 | WPSEC-2026-0102 | Forms <= 3.0.1 - Reflected Cross-Site Scripting via Form Field Parameters | Medium 6.1 | 3.0.2 |
| 2026-10-01 | WPSEC-2026-0101 | Forms <= 3.0.1 - Authenticated (Contributor+) Missing Authorization to Forms and Submissions Access | Medium 5.4 | 3.0.2 |
| 2026-10-01 | WPSEC-2026-0100 | Forms <= 3.0.1 - Unauthenticated Stored Cross-Site Scripting via Form Submission Values | High 7.2 | 3.0.2 |
| 2026-10-01 | WPSEC-2026-0099 | Forms <= 3.0.1 - Unauthenticated Information Exposure of Submitter IP Addresses via REST API | Medium 5.3 | 3.0.2 |
License: CC BY 4.0