Vulnerabilities / WPForms
WPForms vulnerabilities
Advisories WPSec published for WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More. Other sources may list more. Its attack surface: WPForms on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-07 | WPSEC-2026-0520 | WPForms <= 2.0.2.1 - Unauthenticated Reflected Cross-Site Scripting via Smart Tags | Medium 4.7 | 2.0.2.2 |
License: CC BY 4.0