Read the docs

Wp-contact Plugin Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Wp-contact Plugin Project records in CISA KEV

No Wp-contact Plugin Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp-contact-sidebar-widget 1 record LOW

Records

1 record in Wp-contact-sidebar-widget · all components

TI-2014-03769 CVE-2014-4583 · GHSA-7mcv-ggrx-mmh9

Multiple cross-site scripting (XSS) vulnerabilities in forms/messages.php in the…

Priority LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in forms/messages.php in the WP-Contact (wp-contact-sidebar-widget) plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML v…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01629 Published 2014-07-01 No fix listed CWE-79
Open these records in search →