Vulnerabilities / cformsII
cformsII vulnerabilities
Advisories WPSec published for cformsII. Other sources may list more. Its attack surface: cformsII on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-04 | WPSEC-2026-2529 | cformsII <= 15.1.4 - Unauthenticated Reflected Cross-Site Scripting via Form Field Values in Success Message | Medium 4.7 | 15.2 |
| 2026-11-04 | WPSEC-2026-2528 | cformsII <= 15.1.4 - Unauthenticated HTML Injection via Form Field Values in HTML Emails | Medium 4.3 | 15.2 |
License: CC BY 4.0