Plugin icon

Quick Contact Form

quick-contact-form

Vulnerabilities:

9

Last Updated:

January 6, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2026-01-16
Title
Quick Contact Form < 8.2.7 - Unauthenticated Open Mail Relay
Fixed in
Fixed in 8.2.7
CVSS
5.8 (medium)
Published
2025-11-25
Title
Quick Contact Form < 8.2.6 - Cross-Site Request Forgery
Fixed in
Fixed in 8.2.6
CVSS
4.3 (medium)
Published
2025-05-29
Title
Quick Contact Form < 8.2.2 - Reflected Cross-Site Scripting
Fixed in
Fixed in 8.2.2
CVSS
6.1 (medium)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 8.0.6.8
CVSS
6.1 (medium)
Published
2023-02-15
Title
Quick Contact Form < 8.0.4 - Admin+ Stored XSS
Fixed in
Fixed in 8.0.4
CVSS
3.5 (low)
Published
2023-02-06
Title
Quick Contact Form < 8.0.4 - Contributor+ Stored XSS
Fixed in
Fixed in 8.0.4
CVSS
6.8 (medium)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 8.0.2
CVSS
4.3 (medium)
Published
2014-08-01
Title
Quick Contact Form 6.2 - Unspecified XSS
Fixed in
Fixed in 6.3
CVSS
n/a
Published
2013-10-08
Title
Quick Contact Form 6.0 - Stored XSS
Fixed in
Fixed in 6.1
CVSS
n/a