WordPress Plugin contact-form-entries CVE-2026-3837 Sensitive Info Exposure

www.wordfence.com 2026-04-05查看中文 →

Security AdvisoryCVE-2026-3837MediumWordPress

Affected:

Database for Contact Form 7, WPforms, Elementor forms <= 1.4.9

Fixed in:

1.5.0

Referenced CVEs: CVE-2026-3831 · 4.3

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from www.wordfence.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Element Pack SMTP Header Injection Vulnerability (CVE-2026-0673) 2026-08-07 UsersWP <= 1.2.69 Stored XSS via Badge Widget (CVE-2026-18501) Advisory 2026-08-06 WPMU DEV Dashboard CVE-2026-15439 Auth Bypass to RCE via Forged HMAC 2026-08-06 Unauthenticated Stored XSS in TranslatePress <= 3.2.6 (CVE-2026-18510) 2026-08-06 LatePoint <= 5.3.2 Authenticated Stored XSS via Shortcode Attributes (CVE-2026-5391) 2026-08-06

Offline Archive

Offline screenshot & PDF are Pro-exclusive