WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
contact-form-plugin
Published
2015-01-22
Title
Contact Form 3.82 - Unauthorized Language Manipulation
Slug
contact-form-plugin
Published
2017-03-01
Title
Contact Form by BestWebSoft <= 4.0.1 - Stored Cross-Site Scripting (XSS)
Slug
contact-form-plugin
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
contact-form-plugin
Published
2015-04-12
Title
Contact Form Plugin < 3.96 - XSS
Slug
contact-form-plugin
Published
2013-08-13
Title
Contact Form Plugin < 3.52 - XSS
Slug
contact-form-plugin
Published
2024-03-13
Title
Contact Form by BestWebSoft < 4.2.9 - Reflected Cross-Site Scripting via cntctfrm_contact_subject
Slug
contact-form-plugin
Published
2024-03-13
Title
Contact Form by BestWebSoft < 4.2.9 - Reflected Cross-Site Scripting via cntctfrm_contact_address
Slug
contact-form-plugin
Published
2025-12-07
Title
Contact Form by BestWebSoft <= 4.3.5 - Missing Authorization
Slug
contact-form-ready
Published
2023-09-29
Title
Contact Form < 2.0.12 - Form Styling Update via CSRF
Slug
contact-form-ready
Published
2025-06-05
Title
Contact Form <= 2.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
contact-form-submissions
Published
2021-01-03
Title
Contact Form Submissions < 1.7.1 - Authenticated Double Query SQL injection
Slug
contact-form-submissions
Published
2021-01-03
Title
Contact Form Submissions < 1.7.1 - Authenticated SQL Injection
Slug
contact-form-submissions
Published
2022-02-21
Title
Contact Form Submissions < 1.7.3 - Unauthenticated Stored XSS
Slug
contact-form-to-any-api
Published
2023-07-17
Title
Contact Form to Any API < 1.1.3 - Admin+ SQLi
Slug
contact-form-to-any-api
Published
2023-11-20
Title
Contact Form to Any API < 1.1.7 - Subscriber+ API Entry Record Deletion
Slug
contact-form-to-any-api
Published
2024-03-26
Title
Contact Form to Any API < 1.1.9 - Authenticated (Subscriber+) SQL Injection
Slug
contact-form-to-any-api
Published
2024-09-24
Title
Contact Form to Any API < 1.2.5 - Unauthenticated Stored Cross-Site Scripting via Contact Form
Slug
contact-form-to-db
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
contact-form-to-db
Published
2023-10-31
Title
Contact Form to DB by BestWebSoft < 1.7.2 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Slug
contact-form-to-db
Published
2024-06-05
Title
Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress < 1.7.3 - Authenticated (Author+) SQL Injection
Slug
contact-form-to-email
Published
2015-05-13
Title
Contact Form To Email <= 1.1.4 - CSRF & XSS
Slug
contact-form-to-email
Published
2016-07-24
Title
Contact Form to Email <= 1.1.47 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
contact-form-to-email
Published
2019-02-05
Title
Contact Form Email <= 1.2.65 - Multiple Cross-Site Scripting (XSS) & CSRF
Slug
contact-form-to-email
Published
2021-11-11
Title
Contact Form Email < 1.3.25 - Admin+ Stored Cross-Site Scripting
Slug
contact-form-to-email
Published
2023-05-16
Title
Contact Form Email < 1.3.38 - Unauthenticated Stored Cross-Site Scripting