conversational-forms vulnerabilities
CVEs whose affected-version data names the conversational-forms package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-110886Critical· 9.8WordPress Conversational Forms for ChatBot plugin <= 1.5.1 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in QuantumCloud Conversational Forms for ChatBot conversational-forms allows Object Injection.This issue affects Conversational Forms for ChatBot: from n/a through 1.5.1.
▾ MidnightQuantumCloud · conversational-formsEPSS 0.30%via CVEORG
CVE-2026-95531High· 8.8Subscriber PHP Object Injection in Conversational Forms for ChatBot <= 1.5.0 versions.
Subscriber PHP Object Injection in Conversational Forms for ChatBot <= 1.5.0 versions.
▾ TwilightQuantumCloud · conversational-formsEPSS 0.47%via NVD