WordPress security by component
WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms
Plugin description
WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Jun 15, 2026; the highest CVE/CNA score is 9.8.
Plugin slug:
cf7-zendeskLatest vulnerability
CVE-2026-49105: WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms: Code execution
WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms is affected by code execution. The vulnerable path is reachable without authentication. Successful exploitation can run attacker-controlled code in the WordPress hosting account. The published affected range is n/a through 1.1.4.
| Safe version |
|
||
|---|---|---|---|
| Jun 15, 2026 |
CVE-2026-49105
WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms: Code execution
WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms is affected by code execution. The vulnerable path is reachable without authentication. Successful exploitation can run attacker-controlled code in the WordPress hosting account. The published affected range is n/a through 1.1.4.
|
1.1.5 |
CVE9.8
NVDPending
|
| Apr 04, 2025 |
CVE-2025-32269
WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms: Cross-site request forgery
WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
|
See mitigation notes |
CVE4.3
NVDPending
|