WordPress Weforms Vulnerabilities

Wordpress Weforms vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

21 October 2026

Path Traversal Vulnerability in Bold Grid weForms Plugin
CVE-2026-111833
WordPressWeforms7.5HIGH

17 October 2026

Media File Deletion Vulnerability in weForms Plugin for WordPress
CVE-2026-110253
WordPressWeforms – Easy Drag & ...5.4MEDIUM

25 March 2026

Deserialization Vulnerability in BoldGrid weForms Plugin
CVE-2026-32484
WordPressWeforms8.8HIGH

11 March 2026

Stored Cross-Site Scripting Vulnerability in weForms Plugin for WordPress
CVE-2026-2707
WordPressWeforms – Easy Drag & ...6.4MEDIUM

30 December 2025

Broken Access Control in BoldGrid weForms Plugin
CVE-2025-69028
WordPressWeforms5.3MEDIUM

12 June 2024

Missing Authorization vulnerability in weForms
CVE-2023-51524
WordPressWeforms4.3MEDIUM

9 June 2024

Missing Authorization vulnerability in weForms
CVE-2024-30512
WordPressWeforms3.7LOW

17 May 2024

Client-Side Enforcement of Server-Side Security Vulnerability Affects Important Client Functionality
CVE-2024-32512
WordPressWeforms5.3MEDIUM

12 March 2024

Stored Cross-Site Scripting Vulnerability in weForms Plugin
CVE-2024-0386
WordPressWeforms – Easy Drag & ...7.2HIGH

29 December 2023

WordPress weForms Plugin <= 1.6.17 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-50896
WordPressWeforms – Easy Drag & ...5.9MEDIUM

8 August 2022

weForms < 1.6.14 - Admin+ Stored Cross-Site Scripting
CVE-2022-2395
WordpressWeforms – Easy Drag & ...4.8MEDIUM

4 November 2020

CSV Injection Vulnerability in WeForms Plugin by WordPress
CVE-2020-22276
WordpressWeforms9.8CRITICAL