Security Advisory

CVE-2026-49104

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-15 20:19:18
Last updated 2026-06-16 12:53:47
Assigner Patchstack
CVSS score 9.8
State PUBLISHED

Description

Unauthenticated PHP Object Injection in Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms <= 1.2.1 versions.