中文

// CVE · PUBLISHED 2026-06-15

CVE-2026-49109

crm perks / Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms

9.8 · CVSS 3.1Critical

Description

Unauthenticated PHP Object Injection in Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms <= 1.4.3 versions.

References

Related CVEs

  • CVE-2026-49769Tomdever / wpForo ForumCVSS 9.8
  • CVE-2026-49765CRM Perks / Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja FormsCVSS 9.8
  • CVE-2026-49764Metagauss / RegistrationMagicCVSS 9.8
  • CVE-2026-49763CRM Perks / Integration for Contact Form 7 HubSpotCVSS 9.8
  • CVE-2026-49106CRM Perks / Integration for Contact Form 7 and Constant ContactCVSS 9.8
  • CVE-2026-49105CRM Perks / WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja FormsCVSS 9.8
  • CVE-2026-49104CRM Perks / Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja FormsCVSS 9.8
  • CVE-2026-49085CRM Perks / WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja FormsCVSS 9.8

← CVE Index: search every CVE from the last 30 days

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.