CVE
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-4986 | WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More [wpforms-lite] < 1.10.0.5 | Missing Authorization | Unknown | < 1.10.0.5 | 1.10.0.5 | 2026-06-09 | — |
Before version 1.10.0.5, the WPForms plugin for WordPress fails to authenticate incoming PayPal webhook events, enabling unauthorized users to create fake webhook messages and alter the status of any transaction processed by the plugin.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.