CVE-2026-49763

Summary

Unauthenticated PHP Object Injection in Integration for Contact Form 7 HubSpot <= 1.3.7 versions.

Affected Software

Weaknesses

• CWE-502: CWE-502 Deserialization of Untrusted Data

References

• https://patchstack.com/database/wordpress/plugin/cf7-hubspot/vulnerability/wordpress-integration-for-contact-form-7-hubspot-plugin-1-3-7-php-object-injection-vulnerability?_s_id=cve

• ←Previous
• Next→