Login Request a demo
WC
Product
Wordpress Contact Forms
by Cimatti · last CVE Feb 1, 2025
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 2Medium 6Low 0
Severity
All severities8Critical0High2Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Wordpress Contact Forms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-29117
6.1
0%
Mar 19
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cimatti Consulting Contact Forms by Cimatti allows Stored XSS.This issue…
Affected: before 1.8.0
CVE-2023-28789
6.1
0%
Apr 7
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Cimatti Consulting WordPress Contact Forms by Cimatti plugin <= 1.5.4 versions
Affected: before 1.5.5
CVE-2023-28781
6.1
0%
Apr 7
Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Cimatti Consulting WordPress Contact Forms by Cimatti plugin <= 1.5.4 versions
Affected: before 1.5.5
CVE-2024-12184
5.3
0%
Feb 1
WordPress Contact Forms by Cimatti <= 1.9.4 - Missing Authorization to Unauthenticated Form Submission Download
Affected: before 1.9.5
CVE-2024-30549
4.8
0%
Mar 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cimatti Contact Forms by Cimatti contact-forms.This issue affects Contact…
Affected: through 1.8.0
CVE-2024-10521
4.3
0%
Nov 27
WordPress Contact Forms by Cimatti <= 1.9.2 - Cross-Site Request Forgery via process_bulk_action Function
Affected: before 1.9.3
Showing 6