N/A
2023-07-19< 1.6.5
WordPress WPEForm Lite – Drag and Drop Live Form Builder for Contact, Payment & Quiz Forms Plugin <= 1.6.4 is vulnerable to Cross Site Scripting (XSS)
Minimum safe version
1.6.5
Update to 1.6.5 or later to address 3 fixable vulnerabilities
WordPress WPEForm Lite – Drag and Drop Live Form Builder for Contact, Payment & Quiz Forms Plugin <= 1.6.4 is vulnerable to Cross Site Scripting (XSS)
WordPress WPEForm Lite – Drag and Drop Live Form Builder for Contact, Payment & Quiz Forms plugin <= 1.6.2 - Sensitive Information Disclosure vulnerability
WordPress WPEForm Lite – Drag and Drop Live Form Builder for Contact, Payment & Quiz Forms plugin <= 1.6.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability