Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-14206 1 Wordpress-extensions 1 Ht Contact Form 2026-11-11 7.5 High
The HT Contact Form WordPress plugin before 2.9.3 does not perform any authorization check on the endpoint that returns a saved form draft, allowing unauthenticated users to read the personal data (name, email, phone, address) stored in form drafts.