Extension WordPress
Vulnérabilités Contact Us Page – Contact People
Cette page rassemble les failles publiées pour Contact Us Page – Contact People, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Contact Us Page – Contact People
6 fiches
Contact Us page – Contact people LITE <= 3.7.4 – Authenticated (Contributor+) SQL Injection
The Contact Us page – Contact people LITE plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 3.7.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on…
*-3.7.4
Non indiqué
04/07/2025
Contact Us Page – Contact People <= 3.7.4 – Authenticated (Contributor+) Stored Cross-Site Scripting via style Parameter
The Contact Us Page – Contact People plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘style’ parameter in all versions up to, and including, 3.7.4 due to insufficient input sanitization and output escaping. This makes…
*-3.7.4
Non indiqué
12/06/2025
Contact Us Page – Contact People <= 3.7.0 – Cross Site Request Forgery
The Contact Us Page plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.7.0. This is due to missing or incorrect nonce validation on several functions handling the creation and updating of…
*-3.7.0
3.7.1
20/01/2023
a3 Lazy Load <= 2.6.0 – Cross-Site Request Forgery to Settings Reset
The following plugins for WordPress are vulnerable to Cross-Site Request Forgery: a3 Lazy Load (
*-3.6.1
3.6.2
02/11/2022
Contact Us Page – Contact People <= 3.6.1 – Cross-Site Request Forgery to Settings Reset
The Contact Us Page – Contact People plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.6.1. This is due to missing or incorrect nonce validation on the reset_settings function. This makes…
*-3.6.1
3.6.2
01/11/2022
a3rev Multiple Plugins <= Various Versions – Cross-Site Request Forgery to Settings Changes
The a3 Lazy Load, a3 Portfolio, Contact Us Page – Contact People, Dynamic Product Gallery for WooCommerce, a3 Responsive Slider, and Compare Products for WooCommerce plugins for WordPress are vulnerable to Cross-Site Request Forgery respectively in versions up…
*-3.6.0
3.6.1
24/05/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.