Vulnerabilities > Weformspro > Weforms > 1.6.19
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-06-09 | CVE-2024-30512 | Unspecified vulnerability in Weformspro Weforms Missing Authorization vulnerability in weForms.This issue affects weForms: from n/a through 1.6.20. | 9.1 |
| 2024-03-12 | CVE-2024-0386 | Cross-site Scripting vulnerability in Weformspro Weforms The weForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Referer' HTTP header in all versions up to, and including, 1.6.21 due to insufficient input sanitization and output escaping. | 6.1 |