Critical
CVE-2026-4703
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 11
Reset filters
Medium
CVE-2026-11562
WS Form LITE <= 1.11.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Settings Update
Medium
CVE-2025-3912
WS Form LITE – Drag & Drop Contact Form Builder for WordPress <= 1.10.35 - Missing Authorization to Unauthenticated Sensitive Information Exposure
High
CVE-2024-13509
WS Form LITE and PRO <= 1.10.13 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-10647
WS Form LITE – Drag & Drop Contact Form Builder for WordPress <= 1.9.244 - Reflected Cross-Site Scripting via URL
Medium
CVE-2024-47320
WS Form LITE <= 1.9.238 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-5424
WS Form LITE <= 1.9.217 - Unauthenticated CSV Injection
Medium
CVE-2023-52135
WS Form LITE <= 1.9.170 - Authenticated(Administrator+) SQL Injection
Medium
d99f81ea-1e74-4b67-a6c5-3dbc7865a68a
WS Form LITE <= 1.9.117 - CAPTCHA Bypass
High
CVE-2022-23988
WS Form LITE and WS Form Pro < 1.8.176 - Stored Cross-Site Scripting
Medium
CVE-2022-23987
WS Form LITE and Pro < 1.8.176 - Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.