Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: wpkube Component: Simple Basic Contact Form Clear all filters
TI-2024-11789 CVE-2024-12716 · GHSA-4gr5-vxg2-5c62

Simple Basic Contact Form < 20250114 - Admin+ Stored XSS

Priority MEDIUM 55

The Simple Basic Contact Form WordPress plugin before 20250114 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even w…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00326 Published 2025-05-15 Fixed in 20250114 CWE-79
TI-2022-03869 CVE-2022-4226 · GHSA-pgv2-pwvq-76wq

Simple Basic Contact Form < 20221201 - Admin+ Stored XSS

Priority MEDIUM 55

The Simple Basic Contact Form WordPress plugin before 20221201 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even w…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00559 Published 2022-12-26 Fixed in 20221201