Plugin icon

Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress

contact-form-to-db

Vulnerabilities:

4

Last Updated:

July 27, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2026-09-08
Title
Contact Form to DB by BestWebSoft < 1.7.6 - Unauthenticated Stored Cross-Site Scripting via cntctfrm_contact_dropdown Parameter
Fixed in
Fixed in 1.7.6
CVSS
7.2 (high)
Published
2024-06-05
Title
Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress < 1.7.3 - Authenticated (Author+) SQL Injection
Fixed in
Fixed in 1.7.3
CVSS
9.9 (critical)
Published
2023-10-31
Title
Contact Form to DB by BestWebSoft < 1.7.2 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Fixed in
Fixed in 1.7.2
CVSS
n/a
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.5.7
CVSS
6.1 (medium)