CVE-2026-14872

CVE-2026-14872 affects the WordPress plugin family “Database for Contact Form 7, WPforms, Elementor forms” (pre-1.5.5). The issue arises because the plugin does not properly sanitize or escape the id parameter before using it in an SQL statement, enabling an SQL Injection. Exploitation is possibl...