WS Form LITE – Drag & Drop Contact Form Builder vulnerabilities
3 known vulnerabilities in WS Form LITE – Drag & Drop Contact Form Builder from Westguard. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
WS Form LITE – Drag & Drop Contact Form Builder: Improper Neutralization of Input During Web Page Generation
The WS Form LITE – Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'field_<id>[0][0]' parameter in all versions up to, and including, 1.12.18 due to insufficient input sanitization and output escaping.
- 9.8 Critical severity
WS Form LITE – Drag & Drop Contact Form Builder: Deserialization of Untrusted Data
The WS Form LITE – Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.10.80 via deserialization of untrusted input from form submission meta values. This makes it possible for una
- 8.8 High severity
WS Form LITE – Drag & Drop Contact Form Builder: Improper Neutralization of Formula Elements in a CSV File
The WS Form LITE plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.9.217. This allows unauthenticated attackers to embed untrusted input into exported CSV files, which can result in code execution when these files are down