Vulnerabilities

TI-2025-31184 CVE-2025-49069 · GHSA-5877-58jr-h687

WordPress Contact Forms by Cimatti plugin <= 1.9.8 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in cimatti Contact Forms by Cimatti contact-forms allows Cross Site Request Forgery.This issue affects Contact Forms by Cimatti: from n/a through <= 1.9.8.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00142 Published 2025-06-02 No fix listed CWE-352

TI-2024-11299 CVE-2024-12184 · GHSA-39hm-6cvm-cvvw

WordPress Contact Forms by Cimatti <= 1.9.4 - Missing Authorization to Unauthenticated Form Submission Download

LOW 30

The WordPress Contact Forms by Cimatti plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the accua_forms_download_submitted_file() function in all versions up to, and…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00401 Published 2025-02-01 No fix listed CWE-862

TI-2023-17527 CVE-2023-35051 · GHSA-4qg3-w6pq-6h3p

WordPress Contact Forms by Cimatti plugin <= 1.5.7 - Broken Access Control vulnerability

LOW 39

Missing Authorization vulnerability in Cimatti Consulting Contact Forms by Cimatti allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Forms by Cimatti: from n/a through 1.5…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00557 Published 2024-12-13 No fix listed CWE-862

TI-2024-09745 CVE-2024-10521 · GHSA-9hf2-v2rp-2vp6

WordPress Contact Forms by Cimatti <= 1.9.2 - Cross-Site Request Forgery via process_bulk_action Function

LOW 20

The WordPress Contact Forms by Cimatti plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.9.2.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00231 Published 2024-11-27 No fix listed CWE-352

TI-2024-20273 CVE-2024-30549 · GHSA-g457-xcgh-pqm2

WordPress Contact Forms by Cimatti plugin <= 1.8.0 - Cross Site Scripting (XSS) vulnerability

LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cimatti Contact Forms by Cimatti contact-forms.This issue affects Contact Forms by Cimatti: from n/a through <= 1.8.0.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00339 Published 2024-03-31 No fix listed CWE-79

TI-2024-19291 CVE-2024-29117 · GHSA-rh6r-mvm2-jvgv

WordPress Contact Forms by Cimatti plugin <= 1.7.0 - Unauthenticated Stored Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cimatti Consulting Contact Forms by Cimatti allows Stored XSS.This issue affects Contact Forms by Cimatti: from n/a th…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00398 Published 2024-03-19 No fix listed CWE-79

TI-2023-25548 CVE-2023-47230 · GHSA-3285-g6w2-x8q4

WordPress Contact Forms by Cimatti Plugin <= 1.6.0 is vulnerable to Cross Site Request Forgery (CSRF)

MEDIUM 40

Cross-Site Request Forgery (CSRF) vulnerability in Cimatti Consulting WordPress Contact Forms by Cimatti plugin <= 1.6.0 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0027 Published 2023-11-13 No fix listed CWE-352

TI-2023-02395 CVE-2023-2563 · GHSA-2hvx-9r8j-qvph

WordPress Contact Forms by Cimatti <= 1.5.7 - Cross-Site Request Forgery via _accua_forms_form_edit_action

LOW 20

The WordPress Contact Forms by Cimatti plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.7.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00296 Published 2023-06-13 No fix listed CWE-352

TI-2023-13299 CVE-2023-28789 · GHSA-pxh4-4g7r-4w5h

WordPress Contact Forms by Cimatti Plugin <= 1.5.4 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Cimatti Consulting WordPress Contact Forms by Cimatti plugin <= 1.5.4 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-04-07 No fix listed CWE-79

TI-2023-13291 CVE-2023-28781 · GHSA-c2c7-r6r9-3c2v

WordPress Contact Forms by Cimatti Plugin <= 1.5.4 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Cimatti Consulting WordPress Contact Forms by Cimatti plugin <= 1.5.4 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-04-07 No fix listed CWE-79

TI-2021-07026 CVE-2021-24744 · GHSA-594h-wpwq-r565

WordPress Contact Forms by Cimatti < 1.4.12 - Admin+ Stored Cross-Site Scripting

LOW 23

The WordPress Contact Forms by Cimatti WordPress plugin before 1.4.12 does not sanitise and escape the Form Title before outputting it in some admin pages.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00617 Published 2021-10-25 Fixed in 1.4.12 CWE-79

Vulnerabilities

Filters