Security Advisory

CVE-2026-49085

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-15 20:19:17

Last updated 2026-06-16 01:18:31

Assigner Patchstack

CVSS score 9.8

State PUBLISHED

Unauthenticated PHP Object Injection in WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms <= 1.1.4 versions.