Codepeople Contact Form Email
10 CVEs affecting Codepeople Contact Form Email. Latest disclosed: 2025-01-24. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-20964 | High | 8.8 | 2019-08-13 | The contact-form-to-email plugin before 1.2.66 for WordPress has CSRF. |
CVE-2018-20963 | Medium | 6.1 | 2019-08-13 | The contact-form-to-email plugin before 1.2.66 for WordPress has XSS. |
CVE-2019-9646 | Medium | 6.1 | 2019-03-10 | The Contact Form Email plugin before 1.2.66 for WordPress allows wp-admin/admin.php item XSS, related to cp_admin_int_edition.inc.php in the "custom edition ar… |
CVE-2025-24727 | Medium | 5.9 | 2025-01-24 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople Contact Form Email contact-form-to-email allow… |
CVE-2023-2718 | Medium | 5.4 | 2023-06-12 | The Contact Form Email WordPress plugin before 1.3.38 does not escape submitted values before displaying them in the HTML, leading to a Stored XSS vulnerabilit… |
CVE-2023-48318 | Medium | 5.3 | 2024-06-04 | Improper Restriction of Excessive Authentication Attempts vulnerability in CodePeople Contact Form Email allows Functionality Bypass.This issue affects Contact… |
CVE-2024-31302 | Medium | 5.3 | 2024-04-10 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in CodePeople Contact Form Email.This issue affects Contact Form Email: from n/a throu… |
CVE-2023-5955 | Medium | 4.8 | 2023-12-11 | The Contact Form Email WordPress plugin before 1.3.44 does not sanitise and escape some of its settings, which could allow high privilege users such as admin t… |
CVE-2021-42361 | Medium | 4.8 | 2021-11-17 | The Contact Form Email WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and escaping via the name parameter f… |
CVE-2023-28494 | Medium | 4.3 | 2024-06-04 | Missing Authorization vulnerability in CodePeople Contact Form Email allows Functionality Misuse.This issue affects Contact Form Email: from n/a through 1.3.31. |