Skip to content
Threat Feed
Subscribe

Product

WPSyncSheets for Contact Form 7 – CF7 Google Sheets Connector & Save to Database (<= 1.8.0)

1 brief RSS
high advisory

WPSyncSheets For Contact Form 7: PHP Object Injection and Remote Code Execution (CVE-2026-104010)

The WPSyncSheets For Contact Form 7 WordPress plugin is vulnerable to unauthenticated remote code execution via insufficient sanitization of form submission fields and insecure deserialization.

WPSyncSheets For Contact Form 7 – CF7 Google Sheets Connector & Save to Database
1c