← All advisories

High severity7.5NVD Advisory· Published Jun 15, 2026· Updated Jun 15, 2026

CVE-2026-48835

CVE-2026-48835

Description

Unauthenticated Broken Access Control in Contact Form by WPForms <= 1.10.0.4 versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

WordPress/Wpforms Liteinferred2 versions
<=1.10.0.4+ 1 more
- (no CPE)range: <=1.10.0.4
- (no CPE)range: <=1.10.0.4
Package: https://wordpress.org/plugins/wpforms-lite

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/wpforms-lite/vulnerability/wordpress-contact-form-by-wpforms-plugin-1-10-0-4-broken-access-control-vulnerabilitynvd

News mentions

1

Wordfence Intelligence Weekly WordPress Vulnerability Report (May 25, 2026 to May 31, 2026)
Wordfence Blog · Jun 4, 2026