Contact Form by WPForms

1.9.2.1 Missing Authorization to Authenticated (Subscriber+) Payment Refund and Subscription Cancellation vulnerability 1.8.4-1.9.2.1

Admin+ Stored XSS vulnerability < 1.9.1.6

CrossSite Request Forgery (CSRF) to Plugin's Log Deletion vulnerability <= 1.9.1.6

Unauthenticated Price Manipulation vulnerability <= 1.8.7.2

Reflected Cross Site Scripting (XSS) vulnerability <= 1.8.1.2