CVE-2026-105260
Database Addon For WPForms < 1.1.1 - Arbitrary Form Entry Deletion via CSRF
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Database Addon For WPForms ( wpforms entries ) WordPress plugin before 1.1.1 does not verify the CSRF nonce when the field is omitted and performs no capability check of its own, allowing attackers to delete arbitrary stored form entries by tricking a logged-in administrator into loading a crafted page.
| Vendor | unknown |
| Product | database addon for wpforms ( wpforms entries ) |
| Published | Oct 8, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown database addon for wpforms ( wpforms entries )
Be the first to know when new unknown vulnerabilities affecting unknown database addon for wpforms ( wpforms entries ) are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Database Addon For WPForms ( wpforms entries )
0 < 1.1.1
References
Credits
Rik de Kok WPScan