CVEs we hold for Contact
Records whose assigning authority named Contact as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-85117Contact Form 7 Captcha 0.1.7 - 0.1.8 - Unauthenticated Arbitrary Shortcode Execution via Form Field RepopulationUnknown Contact Form 7 Captcha
CVE-2026-77773Social Contact Form (FormyChat) < 2.15.8 - Unauthenticated Gravity Forms Entry Disclosure via formychat_get_gf_entryUnknown Contact Form to Chat Apps | Click to Chat to Order
CVE-2026-18946Contact Form to Any API < 3.0.7 - Unauthenticated Sensitive File Disclosure via Predictable FilenameUnknown Contact Form to Any API
CVE-2025-8280Contact Form 7 reCAPTCHA <= 1.2.0 - Reflected XSS via $_SERVER['REQUEST_URI']Unknown Contact Form 7 reCAPTCHA
CVE-2025-3201Kali Forms < 2.4.3 - Contributor+ Stored XSSUnknown Contact Form builder with drag & drop for WordPress
CVE-2025-1382Contact Us By Lord Linus <= 2.6 - Admin+ Stored XSS via CSRFUnknown Contact Us By Lord Linus
CVE-2024-9375WordPress Captcha Plugin by Captcha Bank <= 4.0.36 - Reflected Cross-Site Scriptingcontact-banker WordPress Captcha Plugin by Captcha Bank
CVE-2024-6517Contact Form 7 Math Captcha <= 2.0.1 - Reflected XSSUnknown Contact Form 7 Math Captcha
CVE-2024-11273Contact Form & SMTP Plugin for WordPress by PirateForms < 2.6.0 - Admin+ Stored XSSUnknown Contact Form & SMTP Plugin for WordPress by…
CVE-2024-11272Contact Form & SMTP Plugin for WordPress by PirateForms < 2.6.0 - Admin+ Stored XSSUnknown Contact Form & SMTP Plugin for WordPress by…
CVE-2024-10504ARForms Builder < 1.7.1 - Unauthenticated Stored XSSUnknown Contact Form, Survey, Quiz & Popup Form Builder
CVE-2023-5955Contact Form Email < 1.3.44 - Editor+ Stored Cross-Site ScriptingUnknown Contact Form Email
CVE-2023-45771WordPress Contact Form With Captcha plugin <= 1.6.8 - Reflected Cross Site Scripting (XSS) vulnerabilityContact Form With Captcha
CVE-2023-41952WordPress Fluent Forms plugin <= 5.0.8 - Broken Access Control vulnerabilityContact Form - WPManageNinja LLC FluentForm
CVE-2023-3645Contact Form Builder by Bit Form < 2.2.0 - Admin+ Stored XSSUnknown Contact Form Builder by Bit Form
CVE-2023-2718Contact Form Email < 1.3.38 - Unauthenticated Stored Cross-Site ScriptingUnknown Contact Form Email
CVE-2023-24410WordPress FluentForm Plugin <= 4.3.25 is vulnerable to SQL InjectionContact Form Builder Plugin for WordPress by Fluent Forms
CVE-2023-0546FluentForms < 4.3.25 - Contributor+ Stored XSS via Custom HTML Form FieldUnknown Contact Form Plugin
CVE-2023-0484Contact Form 7 Widget For Elementor Page Builder & Gutenberg Blocks < 1.1.6 - Arbitrary Plugin Activation via CSRFUnknown Contact Form 7 Widget For Elementor Page Builder &…
CVE-2022-3634Contact Form 7 Database Addon < 1.2.6.5 - CSV InjectionUnknown Contact Form 7 Database Addon
CVE-2022-3463FluentForm < 4.3.13 - CSV InjectionUnknown Contact Form Plugin – Fastest Contact Form Builder…
CVE-2022-3350Contact Bank <= 3.0.30 - Admin+ Stored Cross-Site ScriptingUnknown Contact Bank – Contact Form Builder for WordPress
CVE-2022-23180Contact Form & Lead Form Elementor Builder Plugin < 1.7.4 - Multiple Subscriber+ Settings UpdateUnknown Contact Form & Lead Form Elementor Builder
CVE-2022-23179Contact Form & Lead Form Elementor Builder < 1.7.0 - Multiple Admin+ Stored Cross-Site ScriptingUnknown Contact Form & Lead Form Elementor Builder
CVE-2022-2187Contact Form 7 Captcha < 0.1.2 - Reflected Cross-Site ScriptingUnknown Contact Form 7 Captcha
CVE-2022-2116Elementor Contact Form DB < 1.8.0 - Reflected Cross-Site ScriptingUnknown Contact Form DB – Elementor
CVE-2022-0248Contact Form Submissions < 1.7.3 - Unauthenticated Stored XSSUnknown Contact Form Submissions
CVE-2021-42361Contact Form Email <= 1.3.24 Authenticated Stored Cross-Site ScriptingContact Form Email
CVE-2021-42358Contact Form With Captcha <= 1.6.2 Cross-Site Request Forgery to Reflected Cross-Site ScriptingContact Form With Captcha
CVE-2021-25080Contact Form Entries < 1.1.7 - Unauthenticated Stored Cross-Site ScriptingUnknown Contact Form Entries – Contact Form 7, WPforms and…
CVE-2021-25079Contact Form Entries < 1.2.4 - Reflected Cross-Site ScriptingUnknown Contact Form Entries – Contact Form 7, WPforms and…
CVE-2021-24967Contact Form & Lead Form Elementor Builder < 1.6.4 - Unauthenticated Stored Cross-Site ScriptingUnknown Contact Form & Lead Form Elementor Builder
CVE-2021-24907Everest Forms < 1.8.0 - Reflected Cross-Site ScriptingUnknown Contact Form, Drag and Drop Form Builder for…
CVE-2021-24790Contact Form Advanced Database <= 1.0.8 - Unauthorised AJAX CallsUnknown Contact Form Advanced Database
CVE-2021-24718ARForms Form Builder < 1.5 - Admin+ Stored Cross Site ScriptingUnknown Contact Form, Survey & Popup Form Plugin for…
CVE-2021-24689Contact Forms - Drag & Drop Contact Form Builder <= 1.0.5 - Admin+ Arbitrary System File ReadUnknown Contact Forms – Drag & Drop Contact Form Builder
CVE-2021-24159Contact Form 7 Style <= 3.1.9 - Cross-Site Request Forgery to Stored Cross-Site ScriptingUnknown Contact Form 7 Style
CVE-2021-24144Contact Form 7 Database Addon < 1.2.5.6 - CSV InjectionUnknown Contact Form 7 Database Addon
CVE-2021-24125Contact Form Submissions < 1.7.1 - Authenticated SQL InjectionUnknown Contact Form Submissions
47 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.