WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
contact-form-by-supsystic
Published
2026-10-26
Title
Contact Form by Supsystic – Drag & Drop Form Builder with Templates & Form Statistics < 1.11.1 - Missing Authorization
Slug
contact-form-by-supsystic
Published
2026-10-26
Title
Contact Form by Supsystic – Drag & Drop Form Builder with Templates & Form Statistics < 1.10.7 - Unauthenticated Information Exposure
Slug
contact-form-by-supsystic
Published
2026-10-23
Title
Contact Form by Supsystic < 1.8.0 - Admin+ Stored XSS
Slug
contact-form-by-supsystic
Published
2026-10-26
Title
Contact Form by Supsystic < 1.11.1 - Arbitrary Plugin Settings Update via CSRF
Slug
contact-form-by-supsystic
Published
2026-10-26
Title
Contact Form by Supsystic < 1.11.1 - Admin+ SSTI via Form Text Block
Slug
contact-form-by-supsystic
Published
2026-10-26
Title
Contact Form by Supsystic < 1.11.1 - Contact Submission and Statistics Deletion via CSRF
Slug
contact-form-by-supsystic
Published
2026-10-26
Title
Contact Form by Supsystic < 1.11.1 - Unauthenticated Arbitrary Statistics Deletion
Slug
contact-form-by-supsystic
Published
2026-10-26
Title
Contact Form by Supsystic < 1.11.1 - Unauthenticated CRLF / Email Header Injection via Reply-To Field Mapping
Slug
contact-form-cfdb7
Published
2021-01-21
Title
Contact Form 7 Database Addon < 1.2.5.4 - Authenticated SQL Injections
Slug
contact-form-cfdb7
Published
2021-01-25
Title
Contact Form 7 Database Addon < 1.2.5.6 - CSV Injection
Slug
contact-form-cfdb7
Published
2021-11-12
Title
Contact Form 7 Database Addon < 1.2.6.2 - Unauthenticated Stored Cross-Site Scripting
Slug
contact-form-cfdb7
Published
2021-11-12
Title
Contact Form 7 Database Addon < 1.2.6.1 - Arbitrary Form Deletion via CSRF
Slug
contact-form-cfdb7
Published
2022-10-27
Title
Contact Form 7 Database Addon < 1.2.6.5 - CSV Injection
Slug
contact-form-cfdb7
Published
2024-04-26
Title
Contact Form 7 Database Addon – CFDB7 < 1.2.7 - Unauthenticated Sensitive Information Exposure
Slug
contact-form-cfdb7
Published
2025-07-03
Title
Contact Form 7 Database Addon < 1.3.2 - Unauthenticated Stored XSS via tmpD Parameter
Slug
contact-form-cfdb7
Published
2026-10-13
Title
Contact Form 7 Database Addon < 1.4.2 - Unauthenticated Limited File Deletion via Injected Submission Field
Slug
contact-form-check-tester
Published
2021-04-10
Title
Contact Form Check Tester <= 1.0.2 - Broken Access Control to Cross-Site Scripting (XSS)
Slug
contact-form-db-divi
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
contact-form-db-for-enfold
Published
2026-10-13
Title
Contact Form DB for Enfold <= 2.0.2 - Unauthenticated Stored Cross-Site Scripting via Contact Form Field Values
Slug
contact-form-entries
Published
2021-08-24
Title
Contact Form Entries < 1.2.1 - Reflected Cross-Site Scripting
Slug
contact-form-entries
Published
2021-08-26
Title
Multiple Plugins from CRM Perks - Reflected Cross-Site Scripting
Slug
contact-form-entries
Published
2021-01-05
Title
Contact Form Entries < 1.1.7 - Unauthenticated Stored Cross-Site Scripting
Slug
contact-form-entries
Published
2021-11-14
Title
Contact Form Entries < 1.2.4 - Reflected Cross-Site Scripting
Slug
contact-form-entries
Published
2022-10-21
Title
Contact Form Entries < 1.3.0 - CSV Injection
Slug
contact-form-entries
Published
2023-05-22
Title
Contact Form Entries < 1.3.1 - Contributor+ Stored XSS