Patch Ticker

WPForms contact form plugin reflected XSS flaw

Visitors to WordPress contact form sites can have their data stolen.

Summary

A reflected cross-site scripting flaw in the WordPress contact form plugin WPForms Lite. Versions 2.0.3 and older are affected.

What to do

Update to version 2.0.3.1 or later. The record states 2.0.3.1 as the fixed version.

Products and platforms

  • Contact Form by WPForms

CVE IDs

Sources

Times

First published

First seen