What is CVE-2026-80491?

CVE-2026-80491 is a high-severity vulnerability in Samo Forms, classified under SQL Injection. CVSS score: 8.6/10. Published 2026-09-12.

How severe is CVE-2026-80491?

High severity. CVSS v3 base score is 8.6 out of 10.

SQL Injection in Samo Forms

CVE-2026-80491

The SAMO Forms WordPress plugin through 1.0.0 does not properly sanitise and escape user input before using it in SQL queries in several unauthenticated actions, allowing unauthenticated attackers to perform SQL injection attacks.

Vulnerability class: SQL Injection

CVSS v3 metric

CVSS v3 base score 8.6 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N.

Affected products

Unknown Samo Forms

Weakness classification (CWE)

CWE-89 — SQL Injection

References

contact@wpscan.com (technical-description, exploit, vdb-entry)

Frequently asked questions

What is CVE-2026-80491?: CVE-2026-80491 is a high-severity vulnerability in Samo Forms, classified under SQL Injection. CVSS score: 8.6/10. Published 2026-09-12.
How severe is CVE-2026-80491?: High severity. CVSS v3 base score is 8.6 out of 10.