CVE-2026-121768 | Markus Wiesenhofer Contact Form 7 – Post Fields Plugin up to 2.6.0 on WordPress cross site scripting

November 7, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Markus Wiesenhofer Contact Form 7 – Post Fields Plugin up to 2.6.0 on WordPress. This impacts an unknown function of the component Post Fields. Executing a manipulation can lead to cross site scripting.

This vulnerability is handled as CVE-2026-121768. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More