OCTOBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-95531

HIGH · CVSS 8.8 EPSS 0.48%

Source: NVD + CISA KEV + EPSS · Published 2026-09-30 · Last synced 2026-10-08

CyberRota Analysis

AI-Generated

Conversational Forms for ChatBot versions up to 1.5.0 are vulnerable to PHP Object Injection, which could allow an attacker to execute arbitrary code on the server. This high-severity vulnerability poses a significant risk to any organization using the affected software, particularly those handling sensitive user data. Organizations utilizing this plugin should prioritize immediate updates to mitigate potential exploitation.

CVE
CVE-2026-95531
Severity
HIGH
CVSS
8.8
EPSS
0.48%

Original NVD Description

Subscriber PHP Object Injection in Conversational Forms for ChatBot <= 1.5.0 versions.