Threat Entry Updated 2026-06-17

CVE-2026-49765 - Contact Form 7 Plugin

Unauthenticated PHP Object Injection in Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms

PLUGIN Contact Form 7

CVE-2026-49765

CRITICAL CVSS 9.8 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49764 - WordPress component

Unauthenticated Broken Authentication in RegistrationMagic

UNKNOWN WordPress component

CVE-2026-49764

CRITICAL CVSS 9.8 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-08

CVE-2026-49763 - Integration for Contact Form 7 HubSpot Plugin

Unauthenticated PHP Object Injection in Integration for Contact Form 7 HubSpot

PLUGIN Integration for Contact Form 7 HubSpot

CVE-2026-49763

CRITICAL CVSS 9.8 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49109 - Contact Form 7 Plugin

Unauthenticated PHP Object Injection in Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms

PLUGIN Contact Form 7

CVE-2026-49109

CRITICAL CVSS 9.8 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49106 - Contact Form 7 Plugin

Unauthenticated PHP Object Injection in Integration for Contact Form 7 and Constant Contact

PLUGIN Contact Form 7

CVE-2026-49106

CRITICAL CVSS 9.8 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49105 - Contact Form 7 Plugin

Unauthenticated PHP Object Injection in WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms

PLUGIN Contact Form 7

CVE-2026-49105

CRITICAL CVSS 9.8 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49104 - Contact Form 7 Plugin

Unauthenticated PHP Object Injection in Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms

PLUGIN Contact Form 7

CVE-2026-49104

CRITICAL CVSS 9.8 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49085 - Contact Form 7 Plugin

Unauthenticated PHP Object Injection in WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms

PLUGIN Contact Form 7

CVE-2026-49085

CRITICAL CVSS 9.8 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49112 - WordPress component

Unauthenticated Path Traversal in Shared Files

UNKNOWN WordPress component

CVE-2026-49112

HIGH CVSS 7.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49110 - WordPress component

Unauthenticated Broken Authentication in Upsell Order Bump Offer for WooCommerce

UNKNOWN WordPress component

CVE-2026-49110

HIGH CVSS 7.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49083 - WordPress component

Contributor Privilege Escalation in LatePoint

UNKNOWN WordPress component

CVE-2026-49083

HIGH CVSS 7.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49082 - WordPress component

Subscriber Sensitive Data Exposure in Chatway Live Chat – AI Chatbot, Customer Support, FAQ & Helpdesk Customer Service & Chat Buttons

UNKNOWN WordPress component

CVE-2026-49082

HIGH CVSS 7.4 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49067 - WordPress component

Unauthenticated SQL Injection in Advanced 301 and 302 Redirect

UNKNOWN WordPress component

CVE-2026-49067

CRITICAL CVSS 9.3 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49065 - WordPress component

Unauthenticated Broken Access Control in Hippoo Mobile App for WooCommerce

UNKNOWN WordPress component

CVE-2026-49065

HIGH CVSS 8.2 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49078 - WordPress component

Unauthenticated Other Vulnerability Type in WP Travel Engine

UNKNOWN WordPress component

CVE-2026-49078

HIGH CVSS 7.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49070 - WordPress component

Unauthenticated Broken Access Control in Knit Pay

UNKNOWN WordPress component

CVE-2026-49070

HIGH CVSS 7.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49068 - WordPress component

Subscriber Sensitive Data Exposure in Coupon Affiliates

UNKNOWN WordPress component

CVE-2026-49068

HIGH CVSS 7.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49066 - WordPress component

Unauthenticated Sensitive Data Exposure in Conekta Payment Gateway

UNKNOWN WordPress component

CVE-2026-49066

HIGH CVSS 7.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49061 - WordPress component

Unauthenticated Arbitrary File Download in WPC Product Options for WooCommerce

UNKNOWN WordPress component

CVE-2026-49061

HIGH CVSS 7.5 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

CVE-2026-49063 - WordPress component

Unauthenticated Privilege Escalation in Listdom

UNKNOWN WordPress component

CVE-2026-49063

HIGH CVSS 7.3 2026-06-15

Risk Score

Open Full Technical Breakdown