cleantalk
Vulnerabilities and Security Researches

WPForms Google Sheet Connector, CVE-2025-67979

CVE, Research URL

CVE-2025-67979

Published on
Feb 20, 2026
Research Description
Improper Control of Generation of Code ('Code Injection') vulnerability in WesternDeal WPForms Google Sheet Connector gsheetconnector-wpforms allows Code Injection.This issue affects WPForms Google Sheet Connector: from n/a through <= 4.0.1.
Affected versions
max 4.0.1.
Status
vulnerable