Inquiry form to posts or pages

Inquiry form to posts or pages has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2026; none of them are fixed as of August 2026. Their average CVSS score is 4.3, and the most serious one scores 4.4 out of 10. 2026 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.

None of the 2 issues recorded for Inquiry form to posts or pages have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.

All of these findings were reported by Muhammad Nur Ibnu Hubab.

Strategic Overview

Avg CVSSMedium

4.3/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Inquiry form to posts or pages vulnerabilities before they are exploited.

Most severe open issueCVSS 4.4CVE-2026-5169

Inquiry form to posts or pages <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Form Header Field

Read the full analysis

Vulnerability Records

2 records


2026-04-14 18:02	Inquiry form to posts or pages <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting via 'inq_header' Parameter Inquiry form to posts or pages <= 1.0	`CVE-2026-6293`	4.3 Medium	Muhammad Nur Ibnu Hubab	No
2026-04-07 17:36	Inquiry form to posts or pages <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Form Header Field Inquiry form to posts or pages <= 1.0	`CVE-2026-5169`	4.4 Medium	Muhammad Nur Ibnu Hubab	No

Showing 1–2 of 2 reports