View Ridge Security
Back to Cyber HoseVulnerabilities & CVEs

WPForms Pro Unauthenticated Stored XSS (CVE-2026-18409)

🔓 CVEs & KEV

  • CVE-2026-18409 — CVSS 7.2 — WPForms Pro through 2.0.0.2 - Unauthenticated Stored Cross-Site Scripting via Sing...

Need help assessing your exposure?

Start with the free Posture Self-Check to see where you stand against the current threat landscape.

Free Posture Self-Check