{"uuid": "b8d3df87-658f-4685-b61e-9a6d509b84de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4703", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117142233153816927", "content": "CVE-2026-4703: WS Form LITE \u22641.10.80 has a CRITICAL PHP Object Injection vuln via form meta deserialization. Exploitable if a POP chain exists in another plugin/theme \u2014 possible RCE, file deletion, or data leak. Audit plugins/themes. https://radar.offseq.com/threat/the-ws-form-lite-drag-drop-contact-form-builder-plugin-for-wordpress-is-vulnerable-to-php-object-f688cffee1daa479 #OffSeq #WordPress #CVE20264703", "creation_timestamp": "2026-08-23T01:30:26.742874Z"}