# Syed Balkhi Contact Form by WPForms.

Every CVE that names Syed Balkhi Contact Form by WPForms among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [WordPress Contact Form by WPForms plugin <= 1.10.0.2 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-40764.md)
  `CVE-2026-40764` · CVE record: Syed Balkhi Contact Form by WPForms · CVSS 8.1 High · Not analysed yet · Published 15 Apr 2026 · Tags: Cross-site request forgery (CSRF)
- [WordPress Contact Form by WPForms plugin <= 1.9.8.7 - Sensitive Data Exposure vulnerability](https://agentprime.io/advisories/CVE-2026-25339.md)
  `CVE-2026-25339` · CVE record: Syed Balkhi Contact Form by WPForms · CVSS 6.5 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: Information disclosure
- [WordPress Contact Form by WPForms plugin <= 1.9.9.3 - Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2026-32446.md)
  `CVE-2026-32446` · CVE record: Syed Balkhi Contact Form by WPForms · CVSS 4.3 Medium · Not analysed yet · Published 13 Mar 2026 · Tags: Broken access control
- [WordPress WPForms Lite plugin <= 1.9.2.2 - Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2024-56276.md)
  `CVE-2024-56276` · CVE record: Syed Balkhi Contact Form by WPForms · CVSS 4.3 Medium · Not analysed yet · Published 7 Jan 2025 · Tags: Broken access control

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=syed-balkhi-contact-form-by-wpforms>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/syed-balkhi-contact-form-by-wpforms/>. Everything for agents: <https://agentprime.io/llms.txt>.