Description
Deserialization of Untrusted Data vulnerability in BoldGrid weForms weforms allows Object Injection.This issue affects weForms: from n/a through <= 1.6.26.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| BoldGrid | weForms | ≤ <= 1.6.26 | — |
High · 8.8
CVE-2026-32484
EUVD-2026-15828GHSA-464r-364h-v89v
WordPress weForms plugin <= 1.6.26 - PHP Object Injection vulnerability
Published Mar 25, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack