CVE · Medium

CVE-2026-25339 — WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More [wpforms-lite] < 1.9.9.2

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-25339 WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More [wpforms-lite] < 1.9.9.2 Insertion of Sensitive Information Into Sent Data Medium 6.5 < 1.9.9.2 1.9.9.2 2026-03-23

CVE-2026-25339

The WPForms plugin, used for creating various forms on WordPress sites, has a vulnerability that allows unauthenticated users to access sensitive information such as user details or configurations up to version 1.9.8.7. This flaw could expose critical data if exploited.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.