This page may contain stale information. Last updated: 2026-06-03
Overview
WordPress plugin (Freeform Page Builder & Customizer) with 500K+ active installs.
Recent Developments
- CVE-2026-8206: critical privilege escalation in versions 6.0.0-6.0.6
- Password reset links sent to attacker-controlled email
- Fixed in 6.0.7 (May 18, 2026); active exploitation June 2026
- Discovered by CHOIGYENGMIN; Wordfence telemetry