Forms vulnerabilities
We track 1 vulnerability in Forms products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 14, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Forms vulnerabilities
- 8.8 High severity
Forms: Improper Neutralization of Input During Web Page Generation
The Forms WordPress plugin before 3.0.2 does not sanitise submitted form values on storage, nor escape them before outputting them on the form submissions screen in the administration dashboard, allowing unauthenticated users to inject arbitrary web scripts th