CVE-2025-26994

CVE-2025-26994 is a stored XSS vulnerability in the WordPress plugin Zigaform – Price Calculator & Cost Estimation Form Builder Lite (

CVE-2025-26989

CVE-2025-26989 describes an unauthenticated Stored XSS in Zigaform – Form Builder Lite (WordPress plugin) up to version 7.4.2. The vulnerability stems from improper input neutralization during web page generation, enabling stored cross-site scripting. Affected software is the Zigaform Form Builde...

CVE-2024-13573

CVE-2024-13573 relates to the WordPress plugin Zigaform – Form Builder Lite . Connected docs confirm a Stored Cross-Site Scripting (XSS) in this plugin, affecting versions up to at least 7.4.7 (according to PatchStack) and tied to the plugin's vulnerable shortcode handling. The issue stems from i...

CVE-2024-13587

CVE-2024-13587 concerns the Zigaform – Price Calculator & Cost Estimation Form Builder Lite plugin for WordPress. The exploit is a stored Cross-Site Scripting vulnerability that affects the plugin via the zgfm_fvar shortcode attributes, with the root cause being insufficient input sanitization an...