Advisories · Technology

WPForms Lite.

Every CVE that names WPForms Lite among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-82844 CVE record

CVSS 5.3 Medium

WPForms Lite 1.10.0.1 - 2.0.2.1 - Unauthenticated Payment Bypass via PayPal Commerce
- WPForms Lite
- CWE-345
Not analysed yet 14 Oct 2026
CVE-2023-30500 CVE record

CVSS 5.8 Medium

WordPress WPForms plugins - Reflected Cross Site Scripting (XSS) vulnerability
- WPForms Lite
- WPForms Pro
- Cross-site scripting (XSS)
Not analysed yet 22 Jun 2023