A vulnerability was found in Spam Protect for Contact Form 7 Plugin up to 1.2.9 on WordPress. It has been rated as critical. The impacted element is an unknown function. This manipulation causes code injection. This vulnerability appears as CVE-2026-1540. The attack may be initiated remotely.
| Vendor | Product | Versions |
|---|---|---|
| unknown | spam protect for contact form | 0, 1.2.9 |
Updated description with new technical details, changed severity to CRITICAL, and updated affected versions to include 1.2.9.
Initial creation
