https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T22:59:38.489175+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-3649 CVE-2024-3649 — Contact Form by WPForms – Drag & Drop Form Builder for WordPress <= 1.8.7.2 - Unauthenticated Price Manipulation 2026-10-07T22:59:38.503711+00:00

Affected: smub WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More, wordpress contact_form_drag_and_drop_form_builder

The Contact Form by WPForms – Drag & Drop Form Builder for WordPress plugin for WordPress is vulnerable to price manipulation in versions up to, and including, 1.8.7.2. This is due to a lack of controls on several product parameters. This makes it possible for unauthenticated attackers to manipulate prices, product information, and quantities for purchases made via the Stripe payment integration.