CVE-2026-40764
HIGH
NVD
CVSS Score
8.1
Severity
HIGH
Published
Apr 15, 2026
Vendor
unknown
Description
Cross-Site Request Forgery (CSRF) vulnerability in Syed Balkhi Contact Form by WPForms wpforms-lite allows Cross Site Request Forgery.This issue affects Contact Form by WPForms: from n/a through <= 1.10.0.2.