CVE-2026-1540
Spam Protect for Contact Form 7 < 1.2.10 - Editor+ Remote Code Execution
The Spam Protect for Contact Form 7 WordPress plugin before 1.2.10 allows logging to a PHP file, which could allow an attacker with editor access to achieve Remote Code Execution by using a crafted header
CVSS 3.1 · 7.2 High
EPSS < 1%
KEV · Not listed
Vendors
Products