Description
Unauthenticated Broken Access Control in Online Contact Widget <= 1.3.0 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| wbolt.com | Online Contact Widget | ≤ 1.3.0 | — |
High · 7.5
CVE-2026-32472
EUVD-2026-60906GHSA-39w6-h9gm-h97v
WordPress Online Contact Widget plugin <= 1.3.0 - Broken Access Control vulnerability
Published Aug 18, 2026 · Updated Aug 18, 2026 · Assigned by Patchstack