Known vulnerabilities in WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More
The best WordPress contact form plugin. Drag & Drop form builder to create beautiful contact forms, payment forms, & other custom forms.
21Reported vulnerabilities
7.2Highest CVSS score
2.0.0.4Latest version
5,000,000+Active installs
What to do now
Update WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More to 2.0.0.2 or later.
21 of these have a fixed version available. Updating resolves them.
Reported vulnerabilities
| CVE | Severity | Exploit probability |
Affected versions | Fixed in | Published |
|---|---|---|---|---|---|
| CVE-2020-10385 | Medium | 4.4% | Before 1.5.9 | 1.5.9 |
March 24, 2020 |
| WF-06bc7a24-eafc-4b06-852e-9b596f107805 | High | — | Before 1.6.0.2 | 1.6.0.2 |
May 21, 2020 |
| WF-35246286-c0df-4f82-84b8-ebefe966a4dc | High | — | Before 1.4.8.1 | 1.4.8.1 |
December 10, 2018 |
| CVE-2024-11205 | Medium | 0.7% | 1.8.4 to 1.9.2.1 (inclusive) | 1.9.2.2 |
December 10, 2024 |
| WF-a2ad2c0d-542e-4b40-91a8-19b27297545e | Medium | — | 1.7.5.3 and earlier | 1.7.5.5 |
September 19, 2022 |
| WF-5caa9c7c-07b3-4288-803f-f60e5b428953 | Medium | — | Before 1.4.8 | 1.4.8 |
September 18, 2018 |
| CVE-2023-30500 | Medium | 0.4% | 1.8.1.2 and earlier | 1.8.1.3 |
June 20, 2023 |
| CVE-2026-12127 | Medium | 0.6% | 0 to 1.10.2 (inclusive) | 1.10.2.1 |
July 1, 2026 |
| CVE-2025-3794 | Medium | 0.3% | 0 to 1.9.5 (inclusive) | 1.9.5.1 |
May 9, 2025 |
| CVE-2024-13403 | Medium | 0.4% | 0 to 1.9.3.1 (inclusive) | 1.9.3.2 |
February 4, 2025 |
| CVE-2024-3649 | Medium | 0.7% | 0 to 1.8.7.2 (inclusive) - to 1.8.7.2 (inclusive) |
1.8.8.2 |
May 2, 2024 |
| CVE-2026-7792 | Medium | 0.3% | 0 to 1.10.0.4 (inclusive) | 1.10.0.5 |
June 6, 2026 |
| CVE-2026-48835 | Medium | 0.3% | 1.10.0.4 and earlier | 1.10.0.5 |
May 28, 2026 |
| CVE-2026-25339 | Medium | 0.2% | 1.9.8.7 and earlier | 1.9.9.2 |
March 23, 2026 |
| CVE-2026-15782 | Medium | 0.3% | 0 to 2.0.0.1 (inclusive) | 2.0.0.2 |
July 21, 2026 |
| CVE-2024-11223 | Medium | 0.5% | 1.9.2.2 and earlier | 1.9.2.3 |
December 5, 2024 |
| CVE-2024-7056 | Medium | 0.5% | 1.9.1.5 and earlier | 1.9.1.6 |
November 4, 2024 |
| CVE-2026-40764 | Medium | 0.1% | 1.10.0.2 and earlier | 1.10.0.3 |
March 31, 2026 |
| CVE-2026-32446 | Medium | 0.2% | 1.9.9.3 and earlier | 1.9.9.4 |
March 7, 2026 |
| CVE-2024-56276 | Medium | 0.4% | 1.9.2.2 and earlier | 1.9.2.3 |
January 3, 2025 |
| CVE-2024-10593 | Medium | 0.3% | 0 to 1.9.1.6 (inclusive) | 1.9.2.1 |
November 13, 2024 |