CVE-2026-84921
Webform Submissions Delete - Moderately critical - Access bypass - SA-CONTRIB-2026-133
Missing Authorization vulnerability in Drupal Webform Submissions Delete allows Forceful Browsing. This issue affects Webform Submissions Delete versions: from 0.0.0 to 1.2.0.
CVSS 3.1 · 5.3 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products