CVE-2026-110886: The Critical WordPress Chatbot Plugin Flaw to Patch This Week (2026)
CVE-2026-110886 is a CVSS 9.8 Critical flaw in the Conversational Forms for ChatBot plugin for WordPress, and if your site runs version 1.5.1 or older, it needs attention this week. The bug is a PHP Object Injection — the plugin can be tricked into deserialising untrusted data, which is one of the nastiest vulnerability classes … Read more