CVE-2026-14556 | HappyForms Plugin up to 1.26.14 on WordPress Form Notification Email escape output

October 21, 2026 Yanac

A vulnerability described as critical has been identified in HappyForms Plugin up to 1.26.14 on WordPress. The affected element is an unknown function of the component Form Notification Email. The manipulation results in escaping of output.

This vulnerability is identified as CVE-2026-14556. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More