Bold Grid weForms vulnerabilities

Latest Bold Grid weForms CVEs

Newest publication first

1. CVE-2026-111833 WordPress weForms plugin <= 1.6.28 - Arbitrary File Deletion vulnerability

   Published 2026-10-21

   High·CVSS 7.5

   Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bold Grid weForms weforms allows Path Traversal.This issue affects weForms: from n/a through 1.6.28.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.