Wufoo
Wufoo Shortcode: vulnerabilities and CVEs
Wufoo Shortcode has 3 published vulnerabilities, 1 of them in the last 12 months. 0 are rated critical and 0 are listed by CISA as actively exploited.
CVEs3
Last 12 months1
Critical0
Actively exploited0
All vulnerabilities in the catalogue →⭐ Follow this technology
Latest vulnerabilities
| CVE | Severity | EPSS | Active exploitation | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-66643 | Medium (6.5) | 0.22% | — | Aug 18, 2026 | Contributor Cross Site Scripting (XSS) in Wufoo Shortcode <= 1.55 versions. |
| CVE-2025-58022 | Medium (6.5) | 0.28% | — | Sep 22, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in maxpagels ShortCode shortcode allows Stored XSS.This issue affects ShortCode: from n/a through <= 0.8.1. |
| CVE-2022-4679 | Medium (5.4) | 0.53% | — | Feb 27, 2023 | The Wufoo Shortcode WordPress plugin before 1.52 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the… |