CVE-2026-115302
Received Received - Intake

Unauthenticated Data Deletion in Contact Form by Supsystic

Publication date: 2026-10-29

Last updated on: 2026-10-29

Assigner: WPScan

Description
The Contact Form by Supsystic WordPress plugin before 1.11.1 does not restrict access to an AJAX action that deletes stored form statistics records, allowing unauthenticated attackers to delete arbitrary statistics entries.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-29
Last Modified
2026-10-29
Generated
2026-10-29
AI Q&A
2026-10-29
EPSS Evaluated
N/A
NVD
CVE-2026-115302
EUVD
EUVD-2026-112611

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Unknown Contact Form by Supsystic 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects the WordPress plugin Contact Form by Supsystic versions before 1.11.1. It allows unauthenticated attackers to delete arbitrary statistics entries by exploiting an unrestricted AJAX action that removes stored form data.

Detection Guidance

Check if the Contact Form by Supsystic plugin version is below 1.11.1. Look for unauthorized deletion of form statistics records in logs. Monitor network traffic for suspicious AJAX requests targeting the vulnerable endpoint.

Impact Analysis

Attackers could delete important form statistics, potentially causing loss of data such as user submissions or analytics. This could disrupt website functionality and compromise data integrity.

Compliance Impact

Deleting form statistics without authorization may violate data retention policies required by GDPR or HIPAA, leading to compliance violations and potential legal consequences.

Mitigation Strategies

Update the Contact Form by Supsystic plugin to version 1.11.1 or later immediately. If updating is not possible, consider disabling the plugin until the update is applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-115302. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart