VendorsCimattiwordpress_contact_formsany version
Vulnerabilities

Cimatti Wordpress Contact Forms any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

8CVEs
CVE-2023-35051
WordPress Contact Forms by Cimatti plugin <= 1.5.7 - Broken Access Control vulnerability
Published 2024-12-13 · Modified
8.8EPSS 0.006
CVE-2023-47230
WordPress Contact Forms by Cimatti Plugin <= 1.6.0 is vulnerable to Cross Site Request Forgery (CSRF)
Published 2023-11-13 · Modified
8.8EPSS 0.003
CVE-2024-29117
WordPress Contact Forms by Cimatti plugin <= 1.7.0 - Unauthenticated Stored Cross Site Scripting (XSS) vulnerability
Published 2024-03-19 · Modified
7.1EPSS 0.004
CVE-2023-28781
WordPress Contact Forms by Cimatti Plugin <= 1.5.4 is vulnerable to Cross Site Scripting (XSS)
Published 2023-04-07 · Modified
7.1EPSS 0.004
CVE-2023-28789
WordPress Contact Forms by Cimatti Plugin <= 1.5.4 is vulnerable to Cross Site Scripting (XSS)
Published 2023-04-07 · Modified
7.1EPSS 0.004
CVE-2024-30549
WordPress Contact Forms by Cimatti plugin <= 1.8.0 - Cross Site Scripting (XSS) vulnerability
Published 2024-03-31 · Modified
5.9EPSS 0.003
CVE-2024-12184
WordPress Contact Forms by Cimatti <= 1.9.4 - Missing Authorization to Unauthenticated Form Submission Download
Published 2025-02-01 · Analyzed
5.3EPSS 0.004
CVE-2024-10521
WordPress Contact Forms by Cimatti <= 1.9.2 - Cross-Site Request Forgery via process_bulk_action Function
Published 2024-11-27 · Analyzed
4.3EPSS 0.002