High severity7.1NVD Advisory· Published Jul 23, 2026· Updated Jul 23, 2026
CVE-2026-57427
CVE-2026-57427
Description
Unauthenticated Cross Site Scripting (XSS) in Download Monitor - WPForms Lock <= 1.0.4 versions.
Affected products
1- Range: <=1.0.4
Patches
Vulnerability mechanics
References
1News mentions
1- Wordfence Intelligence Weekly WordPress Vulnerability Report (July 13, 2026 to July 19, 2026)Wordfence Blog · Jul 23, 2026