Westguard vulnerabilities
We track 3 vulnerabilities in Westguard products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 7, 2026.
Latest Westguard vulnerabilities
- 7.2 High severity
WS Form LITE – Drag & Drop Contact Form Builder: Improper Neutralization of Input During Web Page Generation
The WS Form LITE – Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'field_<id>[0][0]' parameter in all versions up to, and including, 1.12.18 due to insufficient input sanitization and output escaping.
- 9.8 Critical severity
WS Form LITE – Drag & Drop Contact Form Builder: Deserialization of Untrusted Data
The WS Form LITE – Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.10.80 via deserialization of untrusted input from form submission meta values. This makes it possible for una
- 8.8 High severity
WS Form LITE – Drag & Drop Contact Form Builder: Improper Neutralization of Formula Elements in a CSV File
The WS Form LITE plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.9.217. This allows unauthenticated attackers to embed untrusted input into exported CSV files, which can result in code execution when these files are down