How many weformspro weforms CVEs are in CISA KEV?

None of weformspro weforms's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of weformspro weforms are affected?

12 distinct weformspro weforms versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in weformspro weforms CVEs?

weformspro weforms's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-862 (Missing Authorization), CWE-602 (Client-Side Enforcement of Server-Side Security).

How many critical weformspro weforms vulnerabilities are there?

weformspro weforms has 2 critical and 2 high-severity CVEs.

What is the average severity of weformspro weforms CVEs?

The average CVSS base score across weformspro weforms's scored CVEs is 7.3.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

weformspro

7 CVEs

weformspro weforms Vulnerabilities

Name: weformspro weforms vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for weforms by weformspro.

7

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.3

Avg CVSS

2020–2024

Last updated June 12, 2024

Overview

weformspro weforms has 7 published CVE records since 2020, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.3.

This page aggregates every publicly disclosed vulnerability (CVE) affecting weformspro weforms, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of weformspro weforms's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High2

Medium3

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of weformspro weforms's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No weformspro weforms CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every weformspro weforms version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.6.212 CVEs
< 1.6.141 CVE
< 1.6.191 CVE
< 1.6.221 CVE
<= 1.6.171 CVE
<= 1.6.181 CVE
1.4.7 <= v <= 1.4.71 CVE

Fixed in

1.6.212 CVEs
> 1.6.181 CVE
1.6.141 CVE
1.6.191 CVE
1.6.221 CVE

Find a version

7 CVEs

Sort

WordPress weForms plugin <= 1.6.18 - Broken Access Control vulnerability
CVE-2023-51524
Patch
CWE-862
High · CVSS 8.8
EPSS 0.3% (26th pct)2024-06-12
WordPress weForms plugin <= 1.6.20 - Broken Access Control vulnerability
CVE-2024-30512
Patch
CWE-862
Critical · CVSS 9.1
EPSS 0.4% (28th pct)2024-06-09
WordPress weForms plugin <= 1.6.20 - Form Submission Restriction Bypass vulnerability
CVE-2024-32512
Patch
CWE-602
Medium · CVSS 5.3
EPSS 0.3% (27th pct)2024-05-17
weForms <= 1.6.21 - Unauthenticated Stored Cross-Site Scripting via Referer
CVE-2024-0386
Patch
CWE-79
High · CVSS 7.2
EPSS 0.6% (45th pct)2024-03-12
WordPress weForms Plugin <= 1.6.17 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-50896
Patch
CWE-79
Medium · CVSS 5.9
EPSS 0.3% (25th pct)2023-12-29
weForms < 1.6.14 - Admin+ Stored Cross-Site Scripting
CVE-2022-2395
Patch
CWE-79
Medium · CVSS 4.8
EPSS 0.5% (41th pct)2022-08-08
Critical vulnerability · 2020-11-04
CVE-2020-22276
Critical · CVSS 9.8
EPSS 3.0% (86th pct)2020-11-04

Common weakness types

The CWE weakness categories most often found in weformspro weforms CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many weformspro weforms CVEs were published each year.

2020

1

2022

1

2023

1

2024

4

Other weformspro products

Browse vulnerabilities for other products by weformspro.

All weformspro vulnerabilities

Frequently asked questions

Common questions about weformspro weforms vulnerabilities.

How many CVEs does weformspro weforms have?: weformspro weforms has 7 published CVE records since 2020.
How many weformspro weforms CVEs are in CISA KEV?: None of weformspro weforms's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for weformspro weforms vulnerabilities?: No weformspro weforms CVEs currently have a tracked public exploit in this dataset.
Which versions of weformspro weforms are affected?: 12 distinct weformspro weforms versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in weformspro weforms CVEs?: weformspro weforms's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-862 (Missing Authorization), CWE-602 (Client-Side Enforcement of Server-Side Security).
How many critical weformspro weforms vulnerabilities are there?: weformspro weforms has 2 critical and 2 high-severity CVEs.
What is the average severity of weformspro weforms CVEs?: The average CVSS base score across weformspro weforms's scored CVEs is 7.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track weformspro weforms vulnerabilities

Monitor new weformspro weforms vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing