Skip to content
Threat Feed
Subscribe

Vendor

Advanced Form Integration

1 brief RSS
high advisory

Authentication Bypass in Advanced Form Integration WordPress Plugin

CVE-2026-104797 allows unauthenticated attackers to change the passwords of any WordPress user, including administrators, via an unverified profile update action in the Advanced Form Integration plugin.

Advanced Form Integration — Connect Forms to 300+ Apps wordpress vulnerability authentication-bypass cve-2026-104797
2t 1c