agentprime: smub-wpforms-ai-form-builder-for-wordpress-contact-forms-payment-forms-survey-foEvery new CVE for smub-wpforms-ai-form-builder-for-wordpress-contact-forms-payment-forms-survey-fo.https://agentprime.io/CVE-2026-101921: WPForms <= 2.0.2.1 - Reflected Cross-Site Scripting via 'query_var' Smart Tag in iframe srcdoc Attributehttps://agentprime.io/advisories/CVE-2026-101921/https://agentprime.io/advisories/CVE-2026-101921/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 07:41:44 GMTCVECVE-2026-88996: WPForms <= 2.0.2 - Reflected Cross-Site Scripting via 'page_title' POST Parameterhttps://agentprime.io/advisories/CVE-2026-88996/https://agentprime.io/advisories/CVE-2026-88996/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 07:40:24 GMTCVECVE-2026-15782: WPForms <= 2.0.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via OptinMonster Integration data-sitekey Attribute in Post Contenthttps://agentprime.io/advisories/CVE-2026-15782/https://agentprime.io/advisories/CVE-2026-15782/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Jul 2026 05:35:28 GMTCVECVE-2026-12127: WPForms <= 1.10.2 - Improper Neutralization of CRLF Sequences to Unauthenticated Email Header Injection via Reply-To Display Namehttps://agentprime.io/advisories/CVE-2026-12127/https://agentprime.io/advisories/CVE-2026-12127/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Jul 2026 04:32:27 GMTCVE