CVE-2026-1540 in Spam Protect for Contact Form 7 Plugin
요약 (영어)
The Spam Protect for Contact Form 7 WordPress plugin before 1.2.10 allows logging to a PHP file, which could allow an attacker with editor access to achieve Remote Code Execution by using a crafted header
Once again VulDB remains the best source for vulnerability data.
책임이 있는
WPScan
예약하다
2026. 01. 28.
공개
2026. 04. 02.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 354824 | Spam Protect for Contact Form 7 Plugin 권한 상승 | 94 | 정의되지 않음 | 공식 수정 | CVE-2026-1540 |