WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
contact-form-by-supsystic
Published
2023-05-16
Title
Contact Form by Supsystic < 1.7.25 - CSRF
Slug
contact-form-by-supsystic
Published
2023-10-03
Title
Contact Form by Supsystic < 1.7.28 - CSRF
Slug
contact-form-by-supsystic
Published
2024-10-13
Title
Contact Form by Supsystic < 1.7.29 - Authenticated (Admin+) Remote Code Execution
Slug
contact-form-by-supsystic
Published
2024-10-14
Title
Contact Form by Supsystic < 1.7.29 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
contact-form-by-supsystic
Published
2025-04-15
Title
Contact Form by Supsystic < 1.7.30 - Cross-Site Request Forgery to Stored Cross-Site Scripting via saveAsCopy AJAX Action
Slug
contact-form-by-supsystic
Published
2025-08-18
Title
Contact Form by Supsystic < 1.8.0 - Reflected XSS
Slug
contact-form-by-supsystic
Published
2026-03-30
Title
Contact Form by Supsystic < 1.8.0 - Unauthenticated Server-Side Template Injection via Prefill Functionality
Slug
contact-form-by-supsystic
Published
2026-08-18
Title
Contact Form by Supsystic < 1.10.0 - Unauthenticated Stored Cross-Site Scripting
Slug
contact-form-by-supsystic
Published
2026-08-18
Title
Contact Form by Supsystic < 1.10.0 - Unauthenticated Payment Bypass
Slug
contact-form-by-supsystic
Published
2026-09-04
Title
Contact Form by Supsystic < 1.10.3 - Unauthenticated Stored Cross-Site Scripting via IP Address Header
Slug
contact-form-cfdb7
Published
2021-01-21
Title
Contact Form 7 Database Addon < 1.2.5.4 - Authenticated SQL Injections
Slug
contact-form-cfdb7
Published
2021-01-25
Title
Contact Form 7 Database Addon < 1.2.5.6 - CSV Injection
Slug
contact-form-cfdb7
Published
2021-11-12
Title
Contact Form 7 Database Addon < 1.2.6.2 - Unauthenticated Stored Cross-Site Scripting
Slug
contact-form-cfdb7
Published
2021-11-12
Title
Contact Form 7 Database Addon < 1.2.6.1 - Arbitrary Form Deletion via CSRF
Slug
contact-form-cfdb7
Published
2022-10-27
Title
Contact Form 7 Database Addon < 1.2.6.5 - CSV Injection
Slug
contact-form-cfdb7
Published
2024-04-26
Title
Contact Form 7 Database Addon – CFDB7 < 1.2.7 - Unauthenticated Sensitive Information Exposure
Slug
contact-form-cfdb7
Published
2025-07-03
Title
Contact Form 7 Database Addon < 1.3.2 - Unauthenticated Stored XSS via tmpD Parameter
Slug
contact-form-check-tester
Published
2021-04-10
Title
Contact Form Check Tester <= 1.0.2 - Broken Access Control to Cross-Site Scripting (XSS)
Slug
contact-form-db-divi
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
contact-form-entries
Published
2021-08-24
Title
Contact Form Entries < 1.2.1 - Reflected Cross-Site Scripting
Slug
contact-form-entries
Published
2021-08-26
Title
Multiple Plugins from CRM Perks - Reflected Cross-Site Scripting
Slug
contact-form-entries
Published
2021-01-05
Title
Contact Form Entries < 1.1.7 - Unauthenticated Stored Cross-Site Scripting
Slug
contact-form-entries
Published
2021-11-14
Title
Contact Form Entries < 1.2.4 - Reflected Cross-Site Scripting
Slug
contact-form-entries
Published
2022-10-21
Title
Contact Form Entries < 1.3.0 - CSV Injection
Slug
contact-form-entries
Published
2023-05-22
Title
Contact Form Entries < 1.3.1 - Contributor+ Stored XSS