7.5
High
CVE-2026-48835 Unauthenticated Broken Access Control in Contact Form by WPForms <= 1.10.0.4 versions
Description
Unauthenticated Broken Access Control in Contact Form by WPForms <= 1.10.0.4 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Contact Form by WPForms 1.10 | earliest → 1.10.0.4 | No fix stated |