Advisories · Technology

Awesomemotive Contact Form by WPForms.

Every CVE that names Awesomemotive Contact Form by WPForms among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-54851 CVE record

CVSS 7.1 High

WordPress Contact Form by WPForms plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability
- Awesomemotive Contact Form by WPForms
- Cross-site scripting (XSS)
Not analysed yet 4 Nov 2026
CVE-2026-48835 CVE record

CVSS 7.5 High

WordPress Contact Form by WPForms plugin <= 1.10.0.4 - Broken Access Control vulnerability
- Awesomemotive Contact Form by WPForms
- Broken access control
Not analysed yet 15 Jun 2026