CVE Alert & Security Feed

Stats Digest Feeds

← Back to all CVEs

CVE-2026-49085

CRITICAL NVD

CVSS Score 9.8

Severity CRITICAL

Published Jun 15, 2026

Vendor unknown

Description

Unauthenticated PHP Object Injection in WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms <= 1.1.4 versions.

References

https://patchstack.com/database/wordpress/plugin/cf7-insightly/vulnerability/wordpress-wp-insightly-for-contact-form-7-wpforms-elementor-formidable-and-ninja-forms-plugin-1-1-4-php-object-injection-vulnerability?_s_id=cve