CVE-2026-40764 - Vulnerability Analysis

Overview

Syed Balkhi Contact Form by WPForms wpforms-lite <= 1.10.0.2 contains a cross-site request forgery vulnerability caused by insufficient request validation, letting attackers perform unauthorized actions via forged requests, exploit requires victim interaction.

Severity & Score

Impact

Attackers can perform unauthorized actions on behalf of authenticated users, potentially compromising user data or site integrity.

Mitigation

Update to a version later than 1.10.0.2 or the latest available version.

References

• https://patchstack.com/database/Wordpress/Plugin/wpforms-lite/vulnerability/wordpress-contact-form-by-wpforms-plugin-1-10-0-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner