Extension WordPress
Vulnérabilités Contact Form Plugin
Cette page rassemble les failles publiées pour Contact Form Plugin, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Contact Form Plugin
4 fiches
Easy Contact Form Lite <= 1.1.28 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Contact Form Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form fields in all versions up to, and including, 1.1.28 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…
*-1.1.28
1.1.29
09/06/2025
Contact Form Plugin <= 1.1.25 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Contact Form Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.1.25 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access…
*-1.1.25
1.1.27
23/02/2025
Easy Contact Form Lite <= 1.1.23 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Easy Contact Form Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.1.23 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level…
*-1.1.23
1.1.25
12/04/2024
Contact Form Plugin <= 4.0.1 – Stored Cross-Site Scripting
A vulnerability classified as problematic has been found in BestWebSoft Contact Form Plugin 4.0.0. This affects an unknown part. The manipulation leads to basic cross site scripting (Stored). It is possible to initiate the attack remotely. The exploit…
*-4.0.1
4.0.2
01/03/2017
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.