{"id":"CVE-2026-1540","aliases":["EUVD-2026-18128","GHSA-76vr-6c8c-grfj"],"status":"published","title":"Spam Protect for Contact Form 7 \u003c 1.2.10 - Editor+ Remote Code Execution","description":"The Spam Protect for Contact Form 7 WordPress plugin before 1.2.10 allows logging to a PHP file, which could allow an attacker with editor access to achieve Remote Code Execution by using a crafted header","severity":{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.00663,"percentile":0.5205,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-94"],"published":"2026-04-02T06:00:10Z","modified":"2026-06-17T10:16:01Z","products":[{"vendor":"unknown","product":"spam protect for contact form 7"}],"references":[{"url":"https://wpscan.com/vulnerability/ad00d1bb-ea8d-44a3-9064-6412804d9e95/","tags":["exploit","vdb-entry","technical-description"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-1540"},{"url":"https://wpscan.com/vulnerability/ad00d1bb-ea8d-44a3-9064-6412804d9e95"},{"url":"https://github.com/advisories/GHSA-76vr-6c8c-grfj"}],"sources":{"cve":[{"id":"CVE-2026-1540","title":"Spam Protect for Contact Form 7 \u003c 1.2.10 - Editor+ Remote Code Execution","description":"The Spam Protect for Contact Form 7 WordPress plugin before 1.2.10 allows logging to a PHP file, which could allow an attacker with editor access to achieve Remote Code Execution by using a crafted header","status":"published","published":"2026-04-02T06:00:10.124Z","modified":"2026-04-02T13:13:54.388Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:20:01.271368Z"}],"euvd":[{"id":"EUVD-2026-18128","description":"The Spam Protect for Contact Form 7 WordPress plugin before 1.2.10 allows logging to a PHP file, which could allow an attacker with editor access to achieve Remote Code Execution by using a crafted header","status":"published","published":"2026-04-02T06:00:10Z","modified":"2026-04-02T13:13:54Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:25:23.121433Z"}],"ghsa":[{"id":"GHSA-76vr-6c8c-grfj","title":"The Spam Protect for Contact Form 7 WordPress plugin before 1.2.10 allows logging to a PHP file,...","description":"The Spam Protect for Contact Form 7 WordPress plugin before 1.2.10 allows logging to a PHP file, which could allow an attacker with editor access to achieve Remote Code Execution by using a crafted header","status":"published","published":"2026-04-02T06:31:16Z","modified":"2026-04-02T15:32:44Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T15:07:05.449461Z"}],"nvd":[{"id":"CVE-2026-1540","description":"The Spam Protect for Contact Form 7 WordPress plugin before 1.2.10 allows logging to a PHP file, which could allow an attacker with editor access to achieve Remote Code Execution by using a crafted header","status":"published","published":"2026-04-02T06:16:22.337Z","modified":"2026-06-17T10:16:01.887Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:12:12.73929Z"}]}}