Skip to content

Vendor

wp-contactform project vulnerabilities

1 published CVE affecting wp-contactform project, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of wp-contactform project alerts

Products

Latest wp-contactform project CVEs

Newest publication first

  1. CVE-2008-0198 WP-ContactForm <= 1.5.1 - Cross-Site Request Forgery

    Published
    MediumCVSS 4.3 EPSS 1.3%

    Multiple cross-site request forgery (CSRF) vulnerabilities in wp-contact-form/options-contactform.php in the WP-ContactForm 1.5 alpha and earlier plugin for WordPress allow remote attackers to perform actions as administrators via the (1) wpcf_question, (2) wpcf_success_msg, or (...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.