CVE-2026-39594
WordPress Ultra Addons for WPForms plugin <= 1.0.11 - Broken Access Control vulnerability
Subscriber Broken Access Control in Ultra Addons for WPForms <= 1.0.11 versions.
CVSS 3.1 · 6.4 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products