← WordPress Vulnerabilities
WordPress security by component

Wow Forms

Wow Forms is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jun 09, 2026; the highest CVE/CNA score is 8.8.

Plugin slug: mwp-forms

CVE-2017-20244: Wow Forms: SQL injection

Wow Forms is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data. The published affected range is 2.1.

PublishedJun 09, 2026
Safe version guidanceSee mitigation notes
Safe version
Jun 09, 2026 CVE-2017-20244
Wow Forms: SQL injection
Wow Forms is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data. The published affected range is 2.1.
See mitigation notes
CVE8.8
NVDPending