Extension WordPress
Vulnérabilités Simple Contact Form Plugin for WordPress – WP Easy Contact
Cette page rassemble les failles publiées pour Simple Contact Form Plugin for WordPress – WP Easy Contact, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Simple Contact Form Plugin for WordPress – WP Easy Contact
5 fiches
WP Easy Contact <= 4.0.1 – Unauthenticated PHP Object Injection
The WP Easy Contact plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.0.1 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No…
*-4.0.1
4.0.2
25/08/2025
Multiple Plugins by emarket-design <= Multiple Versions – Unauthenticated Limited Remote Code Execution
Multiple plugins for WordPress by emarket-design with the 'emd-form-builder-lite' package are vulnerable to Remote Code Execution in various versions via the emd_form_builder_lite_pagenum function. This is due to the plugin not properly validating user input before using it as…
*-4.0.2
4.0.3
05/08/2025
WP Easy Contact <= 4.0.1 – Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameter
The WP Easy Contact plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘noaccess_msg’ parameter in all versions up to, and including, 4.0.1 due to insufficient input sanitization and output escaping. This makes it possible for…
*-4.0.1
4.0.2
04/08/2025
Simplify Contact Management: WP Easy Contact <= 4.0.0 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Simple Contact Form Plugin for WordPress – WP Easy Contact plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'emd_mb_meta' shortcode in all versions up to, and including, 4.0.0 due to insufficient input sanitization…
*-4.0.0
4.0.1
03/06/2025
Best Contact Management Software <= 3.7.3 – Authenticated (Admin+) Stored Cross-Site Scripting
The Best Contact Management Software plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the "No Access Message" setting in versions up to, and including, 3.7.3 due to insufficient input sanitization and output escaping. This makes it…
*-3.7.3
3.8
21/06/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.