Advisories · Technology

bestweblayout Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress.

Every CVE that names bestweblayout Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-13359 CVE record

CVSS 7.2 High

Contact Form to DB by BestWebSoft <= 1.7.5 - Unauthenticated Stored Cross-Site Scripting via cntctfrm_contact_dropdown Parameter
- bestweblayout Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress
- Cross-site scripting (XSS)
Not analysed yet 9 Sept 2026