UNKNOWNCVSS not yet scoredVulnerability

CVE-2026-115302

The Contact Form by Supsystic WordPress plugin before 1.11.1 does not restrict access to an AJAX action that deletes stored form statistics records, allowing unauthenticated attackers to delete arbitrary statistics entries.

Properties

Last source
NVD
Nvd fetched at
2026-10-29T07:47:25.892024+00:00
Cve id
CVE-2026-115302
First seen by Signal
2026-10-29T07:48:21+00:00
Retrieved at
2026-10-29T07:48:21+00:00
Published at
2026-10-29T06:17:20.217
Last modified
2026-10-29T06:17:20.217

Explore deeper with Ninja Signal's threat intelligence graph

Search in SpektrOpen Signal Desktop
CVE-2026-115302 — Ninja Signal Threat Intelligence | Ninja Signal