Signal is active with 4 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form submission data in all versions up to, and including, 1.1.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-2568 Stored XSS Vulnerability in WP Zendesk Contact Form Plugin Versions 1.1.5 and Below https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-2568
Post summary
A stored XSS vulnerability exists in WP Zendesk Contact Form Plugin versions 1.1.5 and earlier, as identified by CVE-2026-2568.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-2568 Intel Report: https://ift.tt/yesoBKh
Post summary
A brief alert referencing CVE-2026-2568 with a link to an Intel report, but no further details are provided.
🚨*CVE* CVE-2026-2568 The WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form submission … https://www.cve.org/CVERecord?id=CVE-2026-2568 ----- Traducción: CVE-2026-2568 El … http://infoflow.cloud`
Post summary
The post announces CVE‑2026‑2568, a stored XSS flaw in several WordPress form plugins, without mentioning PoC, exploit code, active exploitation, or patch details.
CVE-2026-2568 The WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form submission … https://www.cve.org/CVERecord?id=CVE-2026-2568
Post summary
The WP Zendesk plugin for several WordPress form plugins is vulnerable to stored XSS via form submission, as identified by CVE‑2026‑2568.