Live › vulnerability › CVE-2026-115595
Go to dashboardContact Form by Supsystic through version 1.10.7 has a missing authorization check, so access controls are not enforced on some actions. The sources do not say exactly which action an attacker can perform or what data they gain.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 11:29 UTC. All times on this page are UTC.
Sites running the Contact Form by Supsystic WordPress plugin at version 1.10.7 or earlier are affected. The sources do not say which configurations or roles are needed, so the exact exposure is unknown.
No product ranges from the sources yet.
wp plugin get contact-form-by-supsystic --field=version1.10.7Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in Supsystic Contact Form by Supsystic contact-form-by-supsystic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form by Supsystic: from n/a through 1.10.7.
This page as .md · .json · in your agent: get_signal("CVE-2026-115595")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.