CVE-2026-121873

The Redirection for Contact Form 7 WordPress plugin, in versions before 3.2.16 , contains a vulnerability where it fails to verify ownership of email addresses submitted through its data request form action. By default, the plugin records these requests as already confirmed. This allows unauthent...

WordPress Core <= 7.1.3 - Editor+ Stored Cross-Site Scripting via Personal Data Erasure Requests Screen

Editor+ Stored Cross-Site Scripting via Personal Data Erasure Requests Screen vulnerability discovered by Anthropic in WordPress core versions = 7.1.3...