🔓 CVEs & KEV
- CVE-2026-18409 — CVSS 7.2 — WPForms Pro through 2.0.0.2 - Unauthenticated Stored Cross-Site Scripting via Sing...
Back to Cyber Hose
WPForms Pro Unauthenticated Stored XSS (CVE-2026-18409)
A CVSS 7.2 unauthenticated stored cross-site scripting flaw in WPForms Pro through 2.0.0.2 leads this digest.
Need help assessing your exposure?
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check