Advisories · Technology

Syed Balkhi Contact Form by WPForms.

Every CVE that names Syed Balkhi Contact Form by WPForms among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-40764 CVE record

CVSS 8.1 High

WordPress Contact Form by WPForms plugin <= 1.10.0.2 - Cross Site Request Forgery (CSRF) vulnerability
- Syed Balkhi Contact Form by WPForms
- Cross-site request forgery (CSRF)
Not analysed yet 15 Apr 2026
CVE-2026-25339 CVE record

CVSS 6.5 Medium

WordPress Contact Form by WPForms plugin <= 1.9.8.7 - Sensitive Data Exposure vulnerability
- Syed Balkhi Contact Form by WPForms
- Information disclosure
Not analysed yet 25 Mar 2026
CVE-2026-32446 CVE record

CVSS 4.3 Medium

WordPress Contact Form by WPForms plugin <= 1.9.9.3 - Broken Access Control vulnerability
- Syed Balkhi Contact Form by WPForms
- Broken access control
Not analysed yet 13 Mar 2026
CVE-2024-56276 CVE record

CVSS 4.3 Medium

WordPress WPForms Lite plugin <= 1.9.2.2 - Broken Access Control vulnerability
- Syed Balkhi Contact Form by WPForms
- Broken access control
Not analysed yet 7 Jan 2025