Unauthenticated PHP Object Injection in WordPress Contact Form Entries (CVE-2026-12081)

wpscan.com 2026-07-13查看中文 →

Security AdvisoryCVE-2026-12081MediumPlugin Vulnerabilities

Affected:

Contact Form 7 Database Entries < 1.5.2

Fixed in:

1.5.2

Referenced CVEs: CVE-2026-12081

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from wpscan.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Timetics < 1.0.57 Unauthenticated Booking Auto-Approval via Broken Access Control (CVE-2026-14322) 2026-07-22 Events Manager <7.3.7 Unauthenticated SQL Injection via PHP Object Injection with PoC 2026-07-22 Product Addons < 1.6.15 Unauthenticated Stored XSS via SVG Upload (CVE-2026-12968) 2026-07-22 CVE-2026-11767: Unauthenticated Stored XSS in CRT Addons for Elementor < 1.6.7 2026-07-21 WPBot AI ChatBot <= 8.1.0 Subscriber+ Missing Authorization to Modify RAG Settings 2026-07-21

Offline Archive

Offline screenshot & PDF are Pro-exclusive