WS Form vulnerabilities
We track 2 vulnerabilities in WS Form products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 7, 2024.
2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score
Latest WS Form vulnerabilities
- 8.8 High severity
WS Form LITE – Drag & Drop Contact Form Builder: Improper Neutralization of Formula Elements in a CSV File
The WS Form LITE plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.9.217. This allows unauthenticated attackers to embed untrusted input into exported CSV files, which can result in code execution when these files are down
- 7.2 High severity
WS Form LITE – Drag & Drop Contact Form…: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WS Form WS Form LITE – Drag & Drop Contact Form Builder for WordPress.This issue affects WS Form LITE – Drag & Drop Contact Form Builder for WordPress: from n