Product by CodePeople
Contact Form Email
14 known vulnerabilities in Contact Form Email (CodePeople), 0 of them actively exploited (CISA KEV).
Key figures
14
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2019-9646 | Contact Form Email: Cross-Site Scripting (XSS) | 6.1 | |
| High | CVE-2026-112379 | WordPress Contact Form Email plugin <= 1.3.68 - Cross Site Scripting (XSS) vulnerability | 7.1 | |
| High | CVE-2018-20964 | Contact Form Email: Cross-Site Request Forgery (CSRF) | 8.8 | |
| Medium | CVE-2018-20963 | Contact Form Email: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2025-10019 | CodePeople Contact Form Email: Authorization Bypass Through User-Controlled Key | 6.5 | |
| Medium | CVE-2026-32483 | WordPress Contact Form Email plugin <= 1.3.63 - Broken Access Control vulnerability | 6.5 | |
| Medium | CVE-2025-64369 | WordPress Contact Form Email plugin <= 1.3.58 - Broken Access Control vulnerability | 6.5 | |
| Medium | CVE-2023-2718 | Contact Form Email < 1.3.38 - Unauthenticated Stored Cross-Site Scripting | 5.4 | |
| Medium | CVE-2024-31302 | WordPress Contact Form Email plugin <= 1.3.44 - Sensitive Data Exposure vulnerability | 5.3 | |
| Medium | CVE-2021-42361 | Contact Form Email <= 1.3.24 Authenticated Stored Cross-Site Scripting | 4.8 | |
| Medium | CVE-2025-24727 | WordPress Contact Form to Email Plugin <= 1.3.52 - Cross Site Scripting (XSS) vulnerability | 5.9 | |
| Medium | CVE-2023-5955 | Contact Form Email < 1.3.44 - Editor+ Stored Cross-Site Scripting | 4.8 | |
| Medium | CVE-2023-48318 | WordPress Contact Form Email plugin <= 1.3.41 - Captcha Bypass vulnerability | 5.3 | |
| Medium | CVE-2023-28494 | CodePeople Contact Form Email: Missing Authorization | 4.3 |