WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
contact-form-lite
Published
2025-06-09
Title
Easy Contact Form Lite < 1.1.29 - Contributor+ Stored XSS
Slug
contact-form-maker
Published
2015-11-24
Title
Contact Form Maker <= 1.7.30 - Authenticated Blind SQL Injection
Slug
contact-form-maker
Published
2019-04-05
Title
Contact Form by WD <= 1.13.4 - Cross-Site Request Forgery to LFI
Slug
contact-form-maker
Published
2023-06-15
Title
Contact Form by WD <= 1.13.23 - Admin+ SQLi
Slug
contact-form-manager
Published
2015-11-24
Title
Contact Form Manager <= 1.4.1 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
contact-form-manager
Published
2017-03-01
Title
Contact Form Manager < 1.4.4 - CSRF & Cross-Site Scripting (XSS)
Slug
contact-form-manager
Published
2024-05-31
Title
Contact Form Manager < 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
contact-form-master
Published
2024-12-20
Title
Contact Form Master <= 1.0.7 - Reflected XSS
Slug
contact-form-multi
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
contact-form-plugin
Published
2013-08-26
Title
Contact Form 3.34 - contact_form.php cntctfrm_contact_message Parameter XSS
Slug
contact-form-plugin
Published
2014-08-01
Title
Contact Form 3.36 - contact_form.php cntctfrm_contact_email Parameter XSS
Slug
contact-form-plugin
Published
2015-01-22
Title
Contact Form 3.82 - Unauthorized Language Manipulation
Slug
contact-form-plugin
Published
2017-03-01
Title
Contact Form by BestWebSoft <= 4.0.1 - Stored Cross-Site Scripting (XSS)
Slug
contact-form-plugin
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
contact-form-plugin
Published
2015-04-12
Title
Contact Form Plugin < 3.96 - XSS
Slug
contact-form-plugin
Published
2013-08-13
Title
Contact Form Plugin < 3.52 - XSS
Slug
contact-form-plugin
Published
2024-03-13
Title
Contact Form by BestWebSoft < 4.2.9 - Reflected Cross-Site Scripting via cntctfrm_contact_subject
Slug
contact-form-plugin
Published
2024-03-13
Title
Contact Form by BestWebSoft < 4.2.9 - Reflected Cross-Site Scripting via cntctfrm_contact_address
Slug
contact-form-plugin
Published
2025-12-07
Title
Contact Form by BestWebSoft < 4.3.7 - Missing Authorization
Slug
contact-form-ready
Published
2023-09-29
Title
Contact Form < 2.0.12 - Form Styling Update via CSRF
Slug
contact-form-ready
Published
2025-06-05
Title
Contact Form <= 2.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
contact-form-submissions
Published
2021-01-03
Title
Contact Form Submissions < 1.7.1 - Authenticated Double Query SQL injection
Slug
contact-form-submissions
Published
2021-01-03
Title
Contact Form Submissions < 1.7.1 - Authenticated SQL Injection
Slug
contact-form-submissions
Published
2022-02-21
Title
Contact Form Submissions < 1.7.3 - Unauthenticated Stored XSS
Slug
contact-form-to-any-api
Published
2023-07-17
Title
Contact Form to Any API < 1.1.3 - Admin+ SQLi