Cross-site Scripting

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. A stored cross-site scripting (XSS) vulnerability exists in the WPForms Contact Form (aka wpforms-lite) plugin before 1.5.9 for WordPress.CVE-2020-10385Wpforms · 4.4% likely

   CWE-79

2. The WPForms Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form submission parameters in all versions up to, and including, 1.8.5.3 due to insufficient…CVE-2023-7063WPForms · CVSS 7.2 · 0.5% likely

   CWE-79

3. WPForms < 1.9.2.3 - Admin+ Stored XSSCVE-2024-11223Wpforms · CVSS 4.7 · 0.5% likely

   CWE-79

4. WPForms < 1.9.1.6 - Admin+ Stored XSSCVE-2024-7056Wpforms · CVSS 3.5 · 0.4% likely

   CWE-79

5. WordPress WPForms plugins - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2023-30500WPForms · CVSS 5.8 · 0.4% likely

   CWE-79

6. WPForms Pro <= 2.0.0.2 - Unauthenticated Stored Cross-Site Scripting via Single Line Text and Paragraph Text Field ValuesCVE-2026-18409WPForms · CVSS 7.2 · 0.3% likely

   CWE-79

7. Contact Form & SMTP Plugin for WordPress by PirateForms < 2.6.0 - Admin+ Stored XSSCVE-2024-11273Wpforms · CVSS 6.1 · 0.3% likely

   CWE-79

8. Contact Form & SMTP Plugin for WordPress by PirateForms < 2.6.0 - Admin+ Stored XSSCVE-2024-11272Wpforms · CVSS 6.1 · 0.3% likely

   CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.