CVE-2026-110886
CVE-2026-110886 · WordPress Conversational Forms for ChatBot plugin <= 1.5.1 - PHP Object Injection vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Deserialization of Untrusted Data vulnerability in QuantumCloud Conversational Forms for ChatBot conversational-forms allows Object Injection.This issue affects Conversational Forms for ChatBot: from n/a through 1.5.1.
CVSS 9.8 · Critical · EPSS 0.3% · Fix available
- Published
- Updated
Affected products and versions
conversational forms for chatbot
- Versions
- ≥ 0, ≤ 1.5.1: Affected; ≥ 1.5.2: Not affected (custom)
Update to 1.5.2