SiteRespond
Scan

Software intelligence

Ws Form vulnerabilities

11 tracked advisories · slug ws-form

Important: Ws Form appearing in this catalog does not mean your website is affected. Exposure depends on your installed version. How SiteRespond intelligence works

Tracked advisories

11

Latest advisory

21 August 2026

CISA KEV matches

0

In this WordPress feed

WordPress slug

ws-form

Plugin

What this means for Ws Form

This catalog lists 11 known advisories affecting Ws Form. The most recent was published on 21 August 2026. If you use this software, compare your installed version against the affected ranges on each advisory and update to a fixed release outside those ranges. SiteRespond Defence checks your actual installed version when the plugin is connected — listing here does not by itself mean your site is vulnerable.

Latest issues

  • WS Form LITE <= 1.10.80 - Unauthenticated PHP Object Injection via Form Submission

    This advisory describes a other issue in the affected software. Review the source advisory and your installed version to assess exposure.

    Published 21 August 2026

  • WS Form LITE <= 1.11.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Settings Update

    This advisory describes a other issue in the affected software. Review the source advisory and your installed version to assess exposure.

    Published 10 July 2026

  • WS Form LITE – Drag & Drop Contact Form Builder for WordPress <= 1.10.35 - Missing Authorization to Unauthenticated Sensitive Information Exposure

    This advisory describes a other issue in the affected software. Review the source advisory and your installed version to assess exposure.

    Published 24 April 2025

Vulnerability types

  • Cross-site scripting5
  • SQL injection1

Authentication (inferred from titles)

  • Unauthenticated5
  • Authenticated2
  • Unspecified4

Advisory history

Known Ws Form advisories published by month.

All advisories

Check whether your installed version is affected

SiteRespond Defence matches your installed Ws Form version against this catalog when the Defence plugin is connected to your WordPress site.

Start SiteRespond Defence for WordPress — £29.99/monthScan your website