Tag

Cve-2026-104797

1 brief RSS

Authentication Bypass in Advanced Form Integration WordPress Plugin

CVE-2026-104797 allows unauthenticated attackers to change the passwords of any WordPress user, including administrators, via an unverified profile update action in the Advanced Form Integration plugin.

Advanced Form Integration — Connect Forms to 300+ Apps wordpress vulnerability authentication-bypass cve-2026-104797

2t 1c 2h ago