CVE-2026-87741 | Brainstorm Force ConvertPlus Plugin up to 3.6.3 on WordPress cp_display_preview_modal maybe_unserialize style deserialization

A vulnerability, which was classified as critical, has been found in Brainstorm Force ConvertPlus Plugin up to 3.6.3 on WordPress. This impacts the function maybe_unserialize of the component cp_display_preview_modal. The manipulation of the argument style leads to deserialization.

This vulnerability is uniquely identified as CVE-2026-87741. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More