westguard CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL westguard CVE published 2026-08-22

CVE-2026-4703

The WS Form LITE – Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to PHP Object Injection due to deserialization of untrusted input from form submission meta values. This vulnerability, which has a CVSS score of 9.8, allows unauthenticated attackers to inject a PHP Object. However, no known POP chain is present in the vulnerable software, meaning this vulnerability has no impact unles [truncated]