Read the docs

Wp-contactform Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Wp-contactform Project records in CISA KEV

No Wp-contactform Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Wp-contactform · all components

Priority LOW 23

Multiple cross-site request forgery (CSRF) vulnerabilities in wp-contact-form/options-contactform.php in the WP-ContactForm 1.5 alpha and earlier plugin for WordPress allow remote attackers to perform actions as administ…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01284 Published 2008-01-10 No fix listed CWE-352
Open these records in search →