中文

// CVE · PUBLISHED 2026-06-15

CVE-2026-49105

CRM Perks / WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms

9.8 · CVSS 3.1Critical

Description

Unauthenticated PHP Object Injection in WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms <= 1.1.4 versions.

References

Related CVEs

  • CVE-2026-49764Metagauss / RegistrationMagicCVSS 9.8
  • CVE-2026-49763CRM Perks / Integration for Contact Form 7 HubSpotCVSS 9.8
  • CVE-2026-49109crm perks / Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja FormsCVSS 9.8
  • CVE-2026-49106CRM Perks / Integration for Contact Form 7 and Constant ContactCVSS 9.8
  • CVE-2026-49104CRM Perks / Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja FormsCVSS 9.8
  • CVE-2026-49085CRM Perks / WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja FormsCVSS 9.8
  • CVE-2026-49067yydevelopment / Advanced 301 and 302 RedirectCVSS 9.3
  • CVE-2026-48886Ahmad / JS Help DeskCVSS 9.3

← CVE Index: search every CVE from the last 30 days

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.