Contact Form by WPForms – Drag & Drop Form Builder for WordPress, CVE-2026-25339

CVE, Research URL: CVE-2026-25339
Home page URL: Security reports for Contact Form by WPForms – Drag & Drop Form Builder for WordPress
Application: Contact Form by WPForms – Drag & Drop Form Builder for WordPress
Published on: Mar 25, 2026
Research Description: Insertion of Sensitive Information Into Sent Data vulnerability in Syed Balkhi Contact Form by WPForms wpforms-lite allows Retrieve Embedded Sensitive Data.This issue affects Contact Form by WPForms: from n/a through <= 1.9.8.7.
Affected versions: max 1.9.9.2.
Status: vulnerable