WP Clinic
Log in Sign up

CVE · Medium

CVE-2020-36919 — WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More [wpforms-lite] == 1.7.8

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2020-36919 WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More [wpforms-lite] == 1.7.8 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Medium 6.1 < 1.7.8 1.7.8 2026-01-13

CVE-2020-36919

WPForms 1.7.8 contains a cross-site scripting vulnerability in the slider import search feature and tab parameter. Attackers can inject malicious scripts through the ListTable.php endpoint to execute arbitrary JavaScript in victim's browser.

Source: CVE.org

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.