High · 8.8 CVE-2026-95531 EUVD-2026-89853GHSA-h82c-cqjf-5wp2

WordPress Conversational Forms for ChatBot plugin <= 1.5.0 - PHP Object Injection vulnerability

Published Sep 30, 2026 · Updated Sep 30, 2026 · Assigned by Patchstack

Vendor: Quantum Cloud Product: Conversational Forms for ChatBot

Description

Subscriber PHP Object Injection in Conversational Forms for ChatBot <= 1.5.0 versions.

Affected products

Vendor	Product	Affected	Fixed
QuantumCloud	Conversational Forms for ChatBot	≤ 1.5.0	—

References

https://patchstack.com/database/wordpress/plugin/conversational-forms/vulnerability/wordpress-conversational-forms-for-chatbot-plugin-1-5-0-php-object-injection-vulnerability?_s_id=cve vdb-entry