Product by BoldGrid

    Weforms – Easy Drag & Drop Contact Form Builder For Wordpress

    3 known vulnerabilities in Weforms – Easy Drag & Drop Contact Form Builder For Wordpress (BoldGrid), 0 of them actively exploited (CISA KEV).

    Key figures

    3

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Weforms – Easy Drag & Drop Contact Form Builder For Wordpress (BoldGrid)
    MediumCVE-2026-110253

    weForms <= 1.6.28 - Unauthenticated Limited Media File Deletion via 'wpuf_files' Parameter

    		5.4
    HighCVE-2024-0386

    weForms <= 1.6.21 - Unauthenticated Stored Cross-Site Scripting via Referer

    also in 1 other product

    		7.2
    MediumCVE-2026-2707

    Cross-site Scripting (CVE-2026-2707)

    		6.4

    All products by BoldGrid