CVE-2026-40764 | Syed Balkhi Contact Form by WPForms Plugin up to 1.10.0.2 on WordPress cross-site request forgery

A vulnerability classified as problematic has been found in Syed Balkhi Contact Form by WPForms Plugin up to 1.10.0.2 on WordPress. This issue affects some unknown processing. The manipulation leads to cross-site request forgery.

This vulnerability is listed as CVE-2026-40764. The attack may be initiated remotely. There is no available exploit.