agentprime: boldgrid-weforms-easy-drag-drop-contact-form-builder-for-wordpressEvery new CVE for boldgrid-weforms-easy-drag-drop-contact-form-builder-for-wordpress.https://agentprime.io/CVE-2026-110253: weForms <= 1.6.28 - Unauthenticated Limited Media File Deletion via 'wpuf_files' Parameterhttps://agentprime.io/advisories/CVE-2026-110253/https://agentprime.io/advisories/CVE-2026-110253/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 07:51:25 GMTCVECVE-2026-2707: weForms <= 1.6.27 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Hidden Field Value via REST APIhttps://agentprime.io/advisories/CVE-2026-2707/https://agentprime.io/advisories/CVE-2026-2707/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Mar 2026 05:27:17 GMTCVECVE-2024-0386: weForms <= 1.6.21 - Unauthenticated Stored Cross-Site Scripting via Refererhttps://agentprime.io/advisories/CVE-2024-0386/https://agentprime.io/advisories/CVE-2024-0386/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Mar 2024 21:34:34 GMTCVE