CVE Database /
CVE-2026-25339
CVE · Medium
CVE-2026-25339 — WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More [wpforms-lite] < 1.9.9.2
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2026-25339
|
WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More [wpforms-lite] < 1.9.9.2 |
Insertion of Sensitive Information Into Sent Data |
Medium
6.5
|
< 1.9.9.2
|
1.9.9.2 |
2026-03-23 |
—
|
CVE-2026-25339
The WPForms plugin, used for creating various forms on WordPress sites, has a vulnerability that allows unauthenticated users to access sensitive information such as user details or configurations up to version 1.9.8.7. This flaw could expose critical data if exploited.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings