CVE-2026-48835

HighCVSS 7.5

Published: 15/06/2026(UTC)Updated: 15/06/2026(UTC)Translated: 16/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

22th percentile - higher than 22% of all known CVEs

In WPForms versions <= 1.10.0.4, there is an issue with unauthenticated access to the contact form, leading to broken access control.

Organizations may be exposed to unauthorized access to user data, potentially leading to information leakage.

It is recommended to update WPForms to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Unauthenticated Broken Access Control in Contact Form by WPForms <= 1.10.0.4 versions.