Plugin icon

Contact Form by Supsystic

contact-form-by-supsystic

Vulnerabilities:

11

Last Updated:

March 26, 2026

Active Installs:

7000

Published
Title
Fixed in
CVSS
Published
2026-03-30
Title
Contact Form by Supsystic < 1.8.0 - Unauthenticated Server-Side Template Injection via Prefill Functionality
Fixed in
Fixed in 1.8.0
CVSS
9.8 (critical)
Published
2025-08-18
Title
Contact Form by Supsystic <= 1.7.36 - Reflected XSS
Fixed in
No known fix
CVSS
7.1 (high)
Published
2025-04-15
Title
Contact Form by Supsystic < 1.7.30 - Cross-Site Request Forgery to Stored Cross-Site Scripting via saveAsCopy AJAX Action
Fixed in
Fixed in 1.7.30
CVSS
6.1 (medium)
Published
2024-10-14
Title
Contact Form by Supsystic < 1.7.29 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.7.29
CVSS
4.4 (medium)
Published
2024-10-13
Title
Contact Form by Supsystic < 1.7.29 - Authenticated (Admin+) Remote Code Execution
Fixed in
Fixed in 1.7.29
CVSS
7.2 (high)
Published
2023-10-03
Title
Contact Form by Supsystic < 1.7.28 - CSRF
Fixed in
Fixed in 1.7.28
CVSS
4.3 (medium)
Published
2023-05-16
Title
Contact Form by Supsystic < 1.7.25 - CSRF
Fixed in
Fixed in 1.7.25
CVSS
4.3 (medium)
Published
2021-10-28
Title
Contact Form by Supsystic < 1.7.20 - Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 1.7.20
CVSS
3.5 (low)
Published
2021-04-19
Title
Contact Form by Supsystic < 1.7.15 - Reflected Cross-Site scripting (XSS)
Fixed in
Fixed in 1.7.15
CVSS
7.1 (high)
Published
2021-02-08
Title
Contact Form by Supsystic < 1.7.11 - Authenticated SQL Injections
Fixed in
Fixed in 1.7.11
CVSS
9.0 (critical)
Published
2021-02-08
Title
Contact Form by Supsystic < 1.7.7 - Authenticated Stored Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.7.7
CVSS
5.5 (medium)