中文

// CVE · PUBLISHED 2026-06-15

CVE-2026-49765

CRM Perks / Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms

9.8 · CVSS 3.1Critical

Description

Unauthenticated PHP Object Injection in Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms <= 1.1.8 versions.

References

Related CVEs

  • CVE-2026-49781Brainstorm Force / OttoKitCVSS 9.8
  • CVE-2026-49776JExtensions Store / GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate WebsitesCVSS 9.3
  • CVE-2026-49769Tomdever / wpForo ForumCVSS 9.8
  • CVE-2026-49764Metagauss / RegistrationMagicCVSS 9.8
  • CVE-2026-49763CRM Perks / Integration for Contact Form 7 HubSpotCVSS 9.8
  • CVE-2026-49109crm perks / Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja FormsCVSS 9.8
  • CVE-2026-49106CRM Perks / Integration for Contact Form 7 and Constant ContactCVSS 9.8
  • CVE-2026-49105CRM Perks / WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja FormsCVSS 9.8

← CVE Index: search every CVE from the last 30 days

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.