CVE-2026-66639

The WPZOOM Forms – Contact Form Plugin for Gutenberg versions up to 2.0.4 are vulnerable to a Contributor Cross Site Scripting (XSS) attack, allowing attackers to inject malicious scripts into web pages viewed by users. This vulnerability can lead to unauthorized actions on behalf of users or the exposure of sensitive information. Website administrators using this plugin should prioritize patching or upgrading to mitigate potential exploitation risks.