WPForms

Records18All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

WPForms records in CISA KEV

No WPForms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wpforms 9 records MEDIUM Contact Form 4 records MEDIUM Pirate Forms 1 record MEDIUM Wp Mail Smtp 1 record LOW Wpforms Pro 1 record HIGH

Records

1 record in Wp Mail Smtp · all components

TI-2023-03009 CVE-2023-3213 · GHSA-x447-qx63-rhqf

WP Mail SMTP Pro <= 3.8.0 - Missing Authorization to Information Dislcosure via is_print_page

LOW 31

The WP Mail SMTP Pro plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the is_print_page function in versions up to, and including, 3.8.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00514 Published 2023-10-04 No fix listed CWE-862

Open these records in search →

Critical	1
High	7
Medium	9
Low	1
No CVSS	0