Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-32527 EUVD-2026-15893GHSA-4c9q-3pjj-52vf

WordPress WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin <= 1.1.5 - Broken Access Control vulnerability

Published Mar 25, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in CRM Perks WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms cf7-insightly allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms: from n/a through <= 1.1.5.

Affected products

VendorProductAffectedFixed
CRM Perks WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms ≤ <= 1.1.5 —

References