Skip to content

CVE-2026-4703

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
August 23, 2026
Last Seen
August 23, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical PHP Object Injection Vulnerability in WS Form LITE Plugin78.0

A critical PHP Object Injection vulnerability, CVE-2026-4703, has been identified in the WS Form LITE – Drag & Drop Form Builder plugin for WordPress, affecting all versions up to 1.10.80. Unauthenticated attackers can exploit this flaw by submitting specially crafted meta values, leading to potenti...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Zero-day ExploitCWE-502 - Deserialization Of Untrusted DataT1203 - Exploitation for Client ExecutionWordPressPHP Object Injection