Plugin icon

Contact Forms by Cimatti

contact-forms

Vulnerabilities:

10

Last Updated:

September 2, 2026

Active Installs:

600

Published
Title
Fixed in
CVSS
Published
2025-06-02
Title
Contact Forms by Cimatti Plugin < 1.9.9 - Cross-Site Request Forgery
Fixed in
Fixed in 1.9.9
CVSS
4.3 (medium)
Published
2025-01-31
Title
WordPress Contact Forms by Cimatti < 1.9.5 - Missing Authorization to Unauthenticated Form Submission Download
Fixed in
Fixed in 1.9.5
CVSS
5.3 (medium)
Published
2024-11-26
Title
WordPress Contact Forms by Cimatti < 1.9.3 - Cross-Site Request Forgery via process_bulk_action Function
Fixed in
Fixed in 1.9.3
CVSS
4.3 (medium)
Published
2024-03-29
Title
Contact Forms by Cimatti < 1.9.1 - Admin+ Stored XSS
Fixed in
Fixed in 1.9.1
CVSS
3.5 (low)
Published
2024-03-16
Title
Contact Forms by Cimatti < 1.8.0 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 1.8.0
CVSS
7.2 (high)
Published
2023-11-13
Title
Contact Forms by Cimatti < 1.6.1 - CSRF
Fixed in
Fixed in 1.6.1
CVSS
5.4 (medium)
Published
2023-06-13
Title
WordPress Contact Forms by Cimatti < 1.5.8 - Cross-Site Request Forgery
Fixed in
Fixed in 1.5.8
CVSS
4.3 (medium)
Published
2023-03-27
Title
Contact Forms by Cimatti < 1.5.5 - Unauthenticated Stored XSS
Fixed in
Fixed in 1.5.5
CVSS
8.8 (high)
Published
2023-03-27
Title
Contact Forms by Cimatti < 1.5.5 - Reflected XSS
Fixed in
Fixed in 1.5.5
CVSS
7.5 (high)
Published
2021-09-27
Title
WordPress Contact Forms by Cimatti < 1.4.12 - Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 1.4.12
CVSS
3.8 (low)