Wpforms Contact_form
4 CVEs affecting Wpforms Contact_form. Latest disclosed: 2025-03-25. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-25145 | High | 7.2 | 2023-06-07 | The Contact Form & SMTP Plugin by PirateForms plugin for WordPress is vulnerable to HTML injection in the ‘public/class-pirateforms-public.php’ file in version… |
CVE-2024-11273 | Medium | 6.1 | 2025-03-25 | The Contact Form & SMTP Plugin for WordPress by PirateForms WordPress plugin before 2.6.0 does not sanitise and escape some of its settings, which could allow… |
CVE-2023-30500 | Medium | 5.8 | 2023-06-22 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPForms WPForms Lite (wpforms-lite), WPForms WPForms Pro (wpforms) plugins <= 1.8.1.2 versions. |
CVE-2020-10385 | Medium | 5.4 | 2020-03-24 | A stored cross-site scripting (XSS) vulnerability exists in the WPForms Contact Form (aka wpforms-lite) plugin before 1.5.9 for WordPress. |