Plugin icon

Contact Form Email

contact-form-to-email

Vulnerabilities:

12

Last Updated:

May 18, 2026

Active Installs:

9000

Published
Title
Fixed in
CVSS
Published
2026-03-23
Title
Contact Form Email < 1.3.64 - Missing Authorization
Fixed in
Fixed in 1.3.64
CVSS
4.3 (medium)
Published
2025-12-01
Title
Contact Form Email < 1.3.61 - Unauthenticated Insecure Direct Object Reference
Fixed in
Fixed in 1.3.61
CVSS
5.3 (medium)
Published
2025-11-15
Title
Contact Form Email < 1.3.59 - Missing Authorization
Fixed in
Fixed in 1.3.59
CVSS
4.3 (medium)
Published
2025-01-24
Title
Contact Form Email < 1.3.53 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.3.53
CVSS
4.4 (medium)
Published
2024-04-05
Title
Contact Form Email < 1.3.45 - Unauthenticated Sensitive Information Exposure
Fixed in
Fixed in 1.3.45
CVSS
5.3 (medium)
Published
2023-11-23
Title
Contact Form Email < 1.3.42 - Captcha Bypass
Fixed in
Fixed in 1.3.42
CVSS
5.3 (medium)
Published
2023-11-14
Title
Contact Form Email < 1.3.44 - Editor+ Stored Cross-Site Scripting
Fixed in
Fixed in 1.3.44
CVSS
3.5 (low)
Published
2023-05-16
Title
Contact Form Email < 1.3.38 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 1.3.38
CVSS
8.8 (high)
Published
2021-11-11
Title
Contact Form Email < 1.3.25 - Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 1.3.25
CVSS
3.5 (low)
Published
2019-02-05
Title
Contact Form Email <= 1.2.65 - Multiple Cross-Site Scripting (XSS) & CSRF
Fixed in
Fixed in 1.2.66
CVSS
8.8 (high)
Published
2016-07-24
Title
Contact Form to Email <= 1.1.47 - Authenticated Reflected Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.1.48
CVSS
n/a
Published
2015-05-13
Title
Contact Form To Email <= 1.1.4 - CSRF & XSS
Fixed in
Fixed in 1.1.5
CVSS
n/a