<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: smub-wpforms-easy-form-builder-for-wordpress-contact-forms-payment-forms-surveys</title><description>Every new CVE for smub-wpforms-easy-form-builder-for-wordpress-contact-forms-payment-forms-surveys.</description><link>https://agentprime.io/</link><item><title>CVE-2026-7792: WPForms &lt;= 1.10.0.4 - Unauthenticated Insufficient Verification of Data Authenticity via PayPal Commerce Webhook Endpoint</title><link>https://agentprime.io/advisories/CVE-2026-7792/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-7792/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 06 Jun 2026 02:28:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-3794: WPForms Lite &lt;= 1.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via &apos;start_timestamp&apos; Parameter</title><link>https://agentprime.io/advisories/CVE-2025-3794/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-3794/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 09 May 2025 22:22:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-13403: WPForms Lite &lt;= 1.9.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via fieldHTML Parameter</title><link>https://agentprime.io/advisories/CVE-2024-13403/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-13403/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 04 Feb 2025 08:21:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-11205: WPForms 1.8.4 - 1.9.2.1 - Missing Authorization to Authenticated (Subscriber+) Payment Refund and Subscription Cancellation</title><link>https://agentprime.io/advisories/CVE-2024-11205/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-11205/</guid><description>CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 10 Dec 2024 04:23:41 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-10593: WPForms – Easy Form Builder for WordPress &lt;= 1.9.1.6 - Cross-Site Request Forgery (CSRF) to Plugin&apos;s Log Deletion</title><link>https://agentprime.io/advisories/CVE-2024-10593/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-10593/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 13 Nov 2024 02:33:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-3649: Contact Form by WPForms – Drag &amp; Drop Form Builder for WordPress &lt;= 1.8.7.2 - Unauthenticated Price Manipulation</title><link>https://agentprime.io/advisories/CVE-2024-3649/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-3649/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 02 May 2024 16:52:12 GMT</pubDate><category>CVE</category></item></channel></rss>