What’s Vulnerable › Products

hancock11 WP Forms Connector vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your hancock11 WP Forms Connector version is affected

Latest hancock11 WP Forms Connector vulnerabilities

• CVE-2026-9179 — WP Forms Connector <= 1.8 - Unauthenticated SQL Injection via 'order' Parameter (CVSS 7.5)
• CVE-2026-9178 — WP Forms Connector <= 1.8 - Missing Authorization to Unauthenticated Information Exposure via 'user/list' REST Endpoint (CVSS 7.5)