Read the docs

simpleform

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

simpleform records in CISA KEV

No simpleform vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2024-10090 CVE-2024-10884 · GHSA-92r6-576v-g4gg

SimpleForm Contact Form Submissions <= 2.1.0 - Reflected Cross-Site Scripting

Priority LOW 27

The SimpleForm Contact Form Submissions plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all versions up t…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00406 Published 2024-11-16 No fix listed CWE-79
TI-2024-10089 CVE-2024-10883 · GHSA-wj6r-j2cr-pgm5

SimpleForm – Contact form made simple <= 2.2.0 - Reflected Cross-Site Scripting

Priority LOW 27

The SimpleForm – Contact form made simple plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all versions up…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00395 Published 2024-11-16 No fix listed CWE-79
Open these records in search →