Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More 1.9.2.2

  • Severity: medium-risk
  • Status: Fixed
  • Publication: December 5, 2024

The WPForms plugin for WordPress has a security vulnerability that allows attackers with administrator-level permissions to inject harmful web scripts into pages. This can happen if the admin settings are not properly sanitized and escaped. This vulnerability affects versions 1.9.2.2 and below, and only applies to multi-site installations or installations where unfiltered_html is disabled.

Detected in:

WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.