CVE-2024-52347: Wpwebsitecreator Website Remote Install Vor Gravity, Wpforms, Formidable, Ninja, Caldera

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpwebsitecreator Website remote Install vor Gravity, WPForms, Formidable, Ninja, Caldera wp-website-creator allows Stored XSS.This issue affects Website remote Install vor Gravity, WPForms, Formidable, Ninja, Caldera: from n/a through <= 4.0.

Affected products

• Wpwebsitecreator Website Remote Install Vor Gravity, Wpforms, Formidable, Ninja, Caldera: up to and including 4.0

Published 2024-11-18. Last modified 2026-06-17.