W

Weforms

C
CAUTION
6
Total CVEs
1
Crit / High
4
Medium
0%
Unpatched
0%
Patched
5.5
Avg CVSS
0
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB How we collect data →
// INTEL UPGRADE
Full Company Dossier — Coming Soon
Executive profiles, financial exposure, M&A risk, breach history & supply-chain threat mapping — all in one place.
OSINT FINANCIALS EXEC PROFILES BREACH DB
▸ CVE Trend by Year
▸ Patch Coverage
Patched
0%
Unpatched
0%
Under Review
100%
✓ 0 patched ✗ 0 unpatched ~ 2 under review
▸ Intelligence by Audience
PoC Available
1 / 20 shown
CISA KEV (Exploited)
0
Top EPSS (Exploitation Probability)
CVE-2024-0386 12.64% exploitation probability
CVE-2026-2707 0.21% exploitation probability
Quick Facts for Reporting
Total CVEs tracked
6
Critical severity
0
Actively exploited (CISA)
0
Unpatched ratio
0%
Avg CVSS score
5.5
Security grade
C (CAUTION)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-07-14
Security Risk Score (for investors)
LOW
Vuln Volume
GOOD
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
▸ Security News Google News
Legacy web forms are the weakest link in government data security - CyberScoop
CyberScoop 2025-11-21
Hidden Liability: Why Legacy Web Forms Put Life Sciences Organizations at Critical Risk - PharmTech.com
PharmTech.com 2026-04-10
Cybersecurity risk: Hidden vulnerabilities in student data collection - University Business
University Business 2025-11-13
Code injection attacks using publicly disclosed ASP. NET machine keys - Microsoft
Microsoft 2025-02-06
Microsoft Phasing Out InfoPath Web Forms Product - Redmondmag.com
Redmondmag.com 2014-01-31
▸ Recent CVEs showing 20 of 2
CVE IDSeverityPatchEPSSDate
CVE-2026-2707 6.4 MEDIUM PATCH UNDER REVIEW 0.21% 2026-03-11
CVE-2024-0386 PoC 7.2 HIGH PATCH UNDER REVIEW 12.64% 2024-03-12
View all 2 CVEs for Weforms →
▸Intel
Trust ScoreC — CAUTION
Max CVSS7.2
Last Updated2026-07-14
▸Top Weaknesses
CWE-79
Cross-Site Scripting (XSS)
3 occurrences in Weforms CVEs (50% of total)
CWE-79 ⓘ
3
CWE-862
Unknown Weakness Type
2 occurrences in Weforms CVEs (33% of total)
CWE-862 ⓘ
2
CWE-602 (Client-Side Enforcement of Server-Side Security)
Unknown Weakness Type
1 occurrence in Weforms CVEs (17% of total)
CWE-602 (Client-Side Enforcement of Server-Side Security) ⓘ
1
▸Company Profile

WeForms is a WordPress plugin vendor that provides a drag-and-drop form builder for creating contact forms, surveys, and other web forms. Its cybersecurity relevance stems from its widespread use on WordPress sites, where vulnerabilities in the plugin could expose user data or allow site compromise. With only 6 tracked CVEs, it is a niche vendor primarily serving the WordPress ecosystem.

▸Response Metrics
Est. MTTR ⓘ ~500 days (Critical)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↘ -75% better
CVE count 2026 vs 2024:  4 → 1 CVEs
Patch Speed ⓘ Poor (>65% open)
0% of CVEs still unpatched.  Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
▸ Financial Risk Estimate
Est. GDPR Low
€600K
Est. GDPR High
€6.0M

Based on 0 critical CVEs, 0 CISA KEV, 100% unpatched. Model: GDPR Art.83 · not legal advice.

▸Actions
⚖ Compare with another vendor
▸Embed Badge
Weforms C valtersit.com