Plugin icon

Custom Contact Forms

custom-contact-forms

Vulnerabilities:

3

Last Updated:

October 16, 2026

Active Installs:

6000

Published
Title
Fixed in
CVSS
Published
2026-09-04
Title
Custom Contact Forms < 7.16.1 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Deletion and Post Meta Modification via Nested 'fields[].ID' / 'choices[].ID' Parameters
Fixed in
Fixed in 7.16.1
CVSS
2.7 (low)
Published
2014-09-17
Title
Custom Contact Forms < 5.1.0.4 - Unauthenticated Database Import/Export
Fixed in
Fixed in 5.1.0.4
CVSS
9.8 (critical)
Published
2014-08-01
Title
Custom Contact Forms < 5.1.0.3 - Authenticated Cross Site Scripting
Fixed in
Fixed in 5.1.0.3
CVSS
9.6 (critical)