Contact form by supsystic
This hub aggregates every CVE we track for Contact form by supsystic, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.
8
CVEs tracked
2
Critical
1
High
0
In CISA KEV
Severity distribution
MEDIUM5CRITICAL2HIGH1
Monthly trend
0
2
0
0
0
0
0
1
0
0
0
0
0
1
0
0
0
0
1
0
0
0
0
0
2024-092026-08
Latest CVEs
The 8 most recently published vulnerabilities affecting Contact form by supsystic.
- CVE-2026-4257Contact Form by Supsystic <= 1.7.36 - Unauthenticated Server-Side Template Injection via Prefill Functionality9.8
- CVE-2025-52753WordPress Contact Form by Supsystic plugin <= 1.7.36 - Cross Site Scripting (XSS) vulnerability7.1
- CVE-2024-13452Contact Form by Supsystic <= 1.7.29 - Cross-Site Request Forgery to Stored Cross-Site Scripting via saveAsCopy AJAX Action6.1
- CVE-2024-48046WordPress Contact Form by Supsystic plugin <= 1.7.28 - Cross Site Scripting (XSS) vulnerability5.9
- CVE-2024-48042WordPress Contact Form by Supsystic plugin <= 1.7.28 - Remote Code Execution (RCE) vulnerability9.1
- CVE-2023-45068WordPress Contact Form by Supsystic Plugin <= 1.7.27 is vulnerable to Cross Site Request Forgery (CSRF)5.4
- CVE-2023-2528Contact Form by Supsystic <= 1.7.24 - Cross-Site Request Forgery via AJAX action5.4
- CVE-2021-24276Contact Form by Supsystic < 1.7.15 - Reflected Cross-Site scripting (XSS)6.1
Product normalization is registry-driven with AI assist and human review. How it works