CVE-2026-107652 | arshidkv12 Database Addon for Contact Form 7 Plugin up to 1.4.1 on WordPress Delete process_bulk_action injection

October 14, 2026 Yanac

A vulnerability identified as critical has been detected in arshidkv12 Database Addon for Contact Form 7 Plugin up to 1.4.1 on WordPress. Impacted is the function process_bulk_action of the component Delete Handler. The manipulation leads to injection.

This vulnerability is listed as CVE-2026-107652. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More