Plugin icon

Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress

contact-form-plugin

Vulnerabilities:

10

Last Updated:

May 16, 2026

Active Installs:

30000

Published
Title
Fixed in
CVSS
Published
2025-12-07
Title
Contact Form by BestWebSoft < 4.3.7 - Missing Authorization
Fixed in
Fixed in 4.3.7
CVSS
4.3 (medium)
Published
2024-03-13
Title
Contact Form by BestWebSoft < 4.2.9 - Reflected Cross-Site Scripting via cntctfrm_contact_subject
Fixed in
Fixed in 4.2.9
CVSS
6.1 (medium)
Published
2024-03-13
Title
Contact Form by BestWebSoft < 4.2.9 - Reflected Cross-Site Scripting via cntctfrm_contact_address
Fixed in
Fixed in 4.2.9
CVSS
6.1 (medium)
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Fixed in
Fixed in 4.0.6
CVSS
6.1 (medium)
Published
2017-03-01
Title
Contact Form by BestWebSoft <= 4.0.1 - Stored Cross-Site Scripting (XSS)
Fixed in
Fixed in 4.0.2
CVSS
6.1 (medium)
Published
2015-04-12
Title
Contact Form Plugin < 3.96 - XSS
Fixed in
Fixed in 3.96
CVSS
6.1 (medium)
Published
2015-01-22
Title
Contact Form 3.82 - Unauthorized Language Manipulation
Fixed in
Fixed in 3.82
CVSS
n/a
Published
2014-08-01
Title
Contact Form 3.36 - contact_form.php cntctfrm_contact_email Parameter XSS
Fixed in
Fixed in 3.82
CVSS
n/a
Published
2013-08-26
Title
Contact Form 3.34 - contact_form.php cntctfrm_contact_message Parameter XSS
Fixed in
Fixed in 3.35
CVSS
6.1 (medium)
Published
2013-08-13
Title
Contact Form Plugin < 3.52 - XSS
Fixed in
Fixed in 3.52
CVSS
6.1 (medium)