Contact Form By Wpforms

1 CVEs product

Monthly

CVE-2026-32446 MEDIUM This Month

Inadequate authorization controls in WPForms Contact Form plugin version 1.9.9.3 and earlier permit authenticated users to bypass access restrictions and view sensitive form data. An attacker with low-privileged credentials could leverage misconfigured access controls to access information they should not be permitted to view. No patch is currently available for this vulnerability.

Authentication Bypass Contact Form By Wpforms
NVD VulDB
CVSS 3.1
4.3
EPSS
0.0%
CVE-2026-32446
EPSS 0% CVSS 4.3
MEDIUM This Month

Inadequate authorization controls in WPForms Contact Form plugin version 1.9.9.3 and earlier permit authenticated users to bypass access restrictions and view sensitive form data. An attacker with low-privileged credentials could leverage misconfigured access controls to access information they should not be permitted to view. No patch is currently available for this vulnerability.

Authentication Bypass Contact Form By Wpforms
NVD VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy