CVE-2026-4257 | supsysticcom Contact Form by Supsystic Plugin up to 1.7.36 on WordPress registerUndefinedFilterCallback code injection

March 31, 2026 Yanac

A vulnerability, which was classified as critical, was found in supsysticcom Contact Form by Supsystic Plugin up to 1.7.36 on WordPress. This vulnerability affects the function registerUndefinedFilterCallback. The manipulation results in code injection.

This vulnerability was named CVE-2026-4257. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More