What’s Vulnerable › Products
westguard WS Form LITE – Drag & Drop Contact Form Builder vulnerabilities
8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.
Check whether your westguard WS Form LITE – Drag & Drop Contact Form Builder version is affected
Latest westguard WS Form LITE – Drag & Drop Contact Form Builder vulnerabilities
- CVE-2026-4703 — WS Form LITE <= 1.10.80 - Unauthenticated PHP Object Injection via Form Submission (CVSS 9.8)
- CVE-2025-3912 — WS Form LITE – Drag & Drop Contact Form Builder for WordPress <= 1.10.35 - Missing Authorization to Unauthenticated Sensitive Information Exposure (CVSS 5.3)
- CVE-2024-13509 — WS Form LITE and PRO <= 1.10.13 - Unauthenticated Stored Cross-Site Scripting (CVSS 6.1)
- CVE-2024-10647 — WS Form LITE – Drag & Drop Contact Form Builder for WordPress <= 1.9.244 - Reflected Cross-Site Scripting via URL (CVSS 6.1)
- CVE-2023-5424 — WS Form LITE <= 1.9.217 - Unauthenticated CSV Injection (CVSS 8.8)
- CVE-2023-52135 — WordPress WS Form LITE Plugin <= 1.9.170 is vulnerable to SQL Injection (CVSS 7.2)
- CVE-2022-23988 — WS Form < 1.8.176 - Unauthenticated Stored Cross-Site Scripting (CVSS 6.1)
- CVE-2022-23987 — WS Form < 1.8.176 - Admin+ Stored Cross-Site Scripting (CVSS 4.8)