Contact Form by WPForms – Drag & Drop Form Builder for WordPress, CVE-2026-48835

CVE, Research URL: CVE-2026-48835
Home page URL: Security reports for Contact Form by WPForms – Drag & Drop Form Builder for WordPress
Application: Contact Form by WPForms – Drag & Drop Form Builder for WordPress
Published on: Jun 16, 2026
Research Description: Unauthenticated Broken Access Control in Contact Form by WPForms <= 1.10.0.4 versions.
Affected versions: max 1.10.0.5.
Status: vulnerable