Contact Form by WPForms

Authenticated (Contributor+) Stored CrossSite Scripting via fieldHTML Parameter vulnerability <= 1.9.3.1

Broken Access Control vulnerability <= 1.9.2.2

Admin+ Stored XSS vulnerability < 1.9.2.3

1.9.2.1 Missing Authorization to Authenticated (Subscriber+) Payment Refund and Subscription Cancellation vulnerability 1.8.4-1.9.2.1

Admin+ Stored XSS vulnerability < 1.9.1.6