Login Request a demo
CF
Product
Contact Form Email
by codepeople · last CVE Oct 22, 2026
14
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 0High 2Medium 12Low 0
Severity
All severities14Critical0High2Medium12Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Contact Form Email to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-32483
6.5
0%
Mar 25
WordPress Contact Form Email plugin <= 1.3.63 - Broken Access Control vulnerability
Affected: through <= 1.3.63
CVE-2025-10019
6.5
0%
Dec 18
WordPress Contact Form Email plugin <= 1.3.60 - Insecure Direct Object References (IDOR) vulnerability
Affected: through 1.3.60
CVE-2025-64369
6.5
0%
Nov 13
WordPress Contact Form Email plugin <= 1.3.58 - Broken Access Control vulnerability
Affected: through 1.3.58
CVE-2023-48318
6.5
0%
Jun 4
WordPress Contact Form Email plugin <= 1.3.41 - Captcha Bypass vulnerability
Affected: through 1.3.41
CVE-2018-20963
6.1
1%
Aug 13
The contact-form-to-email plugin before 1.2.66 for WordPress has XSS
Affected: before 1.2.66
CVE-2019-9646
6.1
1%
Mar 10
The Contact Form Email plugin before 1.2.66 for WordPress allows wp-admin/admin.php item XSS, related to cp_admin_int_edition.inc.php in the "custom edition area."
Affected: before 1.2.66
CVE-2023-2718
5.4
1%
Jun 12
Contact Form Email < 1.3.38 - Unauthenticated Stored Cross-Site Scripting
Affected: before 1.3.38
CVE-2024-31302
5.3
0%
Apr 10
WordPress Contact Form Email plugin <= 1.3.44 - Sensitive Data Exposure vulnerability
Affected: through 1.3.44
CVE-2025-24727
4.8
0%
Jan 24
WordPress Contact Form to Email Plugin <= 1.3.52 - Cross Site Scripting (XSS) vulnerability
Affected: through 1.3.52
CVE-2023-5955
4.8
0%
Dec 11
Contact Form Email < 1.3.44 - Editor+ Stored Cross-Site Scripting
Affected: before 1.3.44
CVE-2021-42361
4.8
1%
Nov 17
The Contact Form Email WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and escaping via the name parameter found in the…
Affected: through 1.3.24
CVE-2023-28494
4.3
0%
Jun 4
WordPress Contact Form Email plugin <= 1.3.31 - Missing Authorization Leading To Feedback Submission Vulnerability
Affected: through 1.3.31
Showing 12