Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: owenr88 Clear all filters
TI-2025-37563 CVE-2025-60197 · GHSA-w4gr-38pp-hp66

WordPress Simple Contact Forms plugin <= 1.6.4 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in owenr88 Simple Contact Forms simple-contact-forms allows PHP Local File Inclusion.This issue affect…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00434 Published 2025-11-06 No fix listed CWE-98
TI-2025-22778 CVE-2025-31615 · GHSA-9p6m-j66g-84jh

WordPress Simple Contact Forms plugin <= 1.6.4 - CSRF to Stored XSS vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in owenr88 Simple Contact Forms simple-contact-forms allows Stored XSS.This issue affects Simple Contact Forms: from n/a…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00242 Published 2025-03-31 No fix listed CWE-79