CVE-2026-32484: WordPress weForms plugin <= 1.6.26 - PHP Object Injection vulnerability
Published Mar 25, 2026
·Updated
Deserialization of Untrusted Data vulnerability in BoldGrid weForms weforms allows Object Injection.This issue affects weForms: from n/a through <= 1.6.26.
Affected Software
1 affected component
BoldGrid weForms<=1.6.26
Event History
Mar 25, 2026
CVE Published
via MITRE·04:14 PM
Data Sourced
via MITRE·04:14 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:16 PM
DescriptionSeverityWeakness