Description
Unauthenticated PHP Object Injection in Happyforms <= 1.26.13 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Happyforms | Happyforms | ≤ 1.26.13 | — |
Critical · 9.8
CVE-2026-49768
EUVD-2026-36891GHSA-c8fc-9hj8-3f9p
WordPress Happyforms plugin <= 1.26.13 - PHP Object Injection vulnerability
Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by Patchstack