Vulnerabilities

TI-2024-11299 CVE-2024-12184 · GHSA-39hm-6cvm-cvvw

WordPress Contact Forms by Cimatti <= 1.9.4 - Missing Authorization to Unauthenticated Form Submission Download

LOW 30

The WordPress Contact Forms by Cimatti plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the accua_forms_download_submitted_file() function in all versions up to, and…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00391 Published 2025-02-01 No fix listed CWE-862

TI-2023-17527 CVE-2023-35051 · GHSA-4qg3-w6pq-6h3p

WordPress Contact Forms by Cimatti plugin <= 1.5.7 - Broken Access Control vulnerability

LOW 39

Missing Authorization vulnerability in Cimatti Consulting Contact Forms by Cimatti allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Forms by Cimatti: from n/a through 1.5…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00557 Published 2024-12-13 No fix listed CWE-862

TI-2024-09745 CVE-2024-10521 · GHSA-9hf2-v2rp-2vp6

WordPress Contact Forms by Cimatti <= 1.9.2 - Cross-Site Request Forgery via process_bulk_action Function

LOW 20

The WordPress Contact Forms by Cimatti plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.9.2.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00231 Published 2024-11-27 No fix listed CWE-352

TI-2024-20273 CVE-2024-30549 · GHSA-g457-xcgh-pqm2

WordPress Contact Forms by Cimatti plugin <= 1.8.0 - Cross Site Scripting (XSS) vulnerability

LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cimatti Contact Forms by Cimatti contact-forms.This issue affects Contact Forms by Cimatti: from n/a through <= 1.8.0.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00339 Published 2024-03-31 No fix listed CWE-79

TI-2024-19291 CVE-2024-29117 · GHSA-rh6r-mvm2-jvgv

WordPress Contact Forms by Cimatti plugin <= 1.7.0 - Unauthenticated Stored Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cimatti Consulting Contact Forms by Cimatti allows Stored XSS.This issue affects Contact Forms by Cimatti: from n/a th…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00398 Published 2024-03-19 No fix listed CWE-79

TI-2023-25548 CVE-2023-47230 · GHSA-3285-g6w2-x8q4

WordPress Contact Forms by Cimatti Plugin <= 1.6.0 is vulnerable to Cross Site Request Forgery (CSRF)

MEDIUM 40

Cross-Site Request Forgery (CSRF) vulnerability in Cimatti Consulting WordPress Contact Forms by Cimatti plugin <= 1.6.0 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0027 Published 2023-11-13 No fix listed CWE-352

TI-2023-13299 CVE-2023-28789 · GHSA-pxh4-4g7r-4w5h

WordPress Contact Forms by Cimatti Plugin <= 1.5.4 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Cimatti Consulting WordPress Contact Forms by Cimatti plugin <= 1.5.4 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-04-07 No fix listed CWE-79

TI-2023-13291 CVE-2023-28781 · GHSA-c2c7-r6r9-3c2v

WordPress Contact Forms by Cimatti Plugin <= 1.5.4 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Cimatti Consulting WordPress Contact Forms by Cimatti plugin <= 1.5.4 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-04-07 No fix listed CWE-79

Vulnerabilities

Filters