click5 CRM add-on to WPForms vulnerabilities
We track 2 vulnerabilities in click5 CRM add-on to WPForms products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 11, 2026.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest click5 CRM add-on to WPForms vulnerabilities
- 8.8 High severity
click5 CRM add-on to WPForms: Improper Neutralization of Input During Web Page Generation
The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege user
- 9.8 Critical severity
click5 CRM add-on to WPForms: Missing Authorization
The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to WPForms WordPress plugi