Read the docs

Cimatti Consulting

Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Cimatti Consulting records in CISA KEV

No Cimatti Consulting vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wordpress Contact Forms 8 records MEDIUM Contact Forms 2 records LOW

Records

8 records in Wordpress Contact Forms · all components

TI-2023-17527 CVE-2023-35051 · GHSA-4qg3-w6pq-6h3p

WordPress Contact Forms by Cimatti plugin <= 1.5.7 - Broken Access Control vulnerability

Priority LOW 39

Missing Authorization vulnerability in Cimatti Consulting Contact Forms by Cimatti allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Forms by Cimatti: from n/a through 1.5…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00557 Published 2024-12-13 No fix listed CWE-862
TI-2024-19291 CVE-2024-29117 · GHSA-rh6r-mvm2-jvgv

WordPress Contact Forms by Cimatti plugin <= 1.7.0 - Unauthenticated Stored Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cimatti Consulting Contact Forms by Cimatti allows Stored XSS.This issue affects Contact Forms by Cimatti: from n/a th…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00398 Published 2024-03-19 No fix listed CWE-79
TI-2024-11299 CVE-2024-12184 · GHSA-39hm-6cvm-cvvw

WordPress Contact Forms by Cimatti <= 1.9.4 - Missing Authorization to Unauthenticated Form Submission Download

Priority LOW 30

The WordPress Contact Forms by Cimatti plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the accua_forms_download_submitted_file() function in all versions up to, and…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00391 Published 2025-02-01 No fix listed CWE-862
TI-2024-20273 CVE-2024-30549 · GHSA-g457-xcgh-pqm2

WordPress Contact Forms by Cimatti plugin <= 1.8.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cimatti Contact Forms by Cimatti contact-forms.This issue affects Contact Forms by Cimatti: from n/a through <= 1.8.0.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00339 Published 2024-03-31 No fix listed CWE-79
Open these records in search →