CVE-2026-95816

The Smart Forms WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.6.104 . The flaw exists in the 'formString' parameter due to insufficient input sanitization and output escaping. Because the nonce check for the rednao_smart_forms_save_form_...

EUVD-2026-100794

The Smart Forms – when you need more than just a contact form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'formString' parameter in all versions up to, and including, 2.6.104 due to insufficient input sanitization and output escaping. This makes it possible for...

PT-2026-113625

The Smart Forms – when you need more than just a contact form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'formString' parameter in all versions up to, and including, 2.6.104 due to insufficient input sanitization and output escaping. This makes it possible for...