Advisories · Technology

Codepeople Contact Form Email.

Every CVE that names Codepeople Contact Form Email among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-112379 CVE record

CVSS 7.1 High

WordPress Contact Form Email plugin <= 1.3.68 - Cross Site Scripting (XSS) vulnerability
- Codepeople Contact Form Email
- Cross-site scripting (XSS)
Not analysed yet 22 Oct 2026
CVE-2026-32483 CVE record

CVSS 6.5 Medium

WordPress Contact Form Email plugin <= 1.3.63 - Broken Access Control vulnerability
- codepeople Contact Form Email
- Broken access control
Not analysed yet 25 Mar 2026
CVE-2025-10019 CVE record

CVSS 6.5 Medium

WordPress Contact Form Email plugin <= 1.3.60 - Insecure Direct Object References (IDOR) vulnerability
- codepeople Contact Form Email
- Broken access control
Not analysed yet 18 Dec 2025
CVE-2025-64369 CVE record

CVSS 6.5 Medium

WordPress Contact Form Email plugin <= 1.3.58 - Broken Access Control vulnerability
- codepeople Contact Form Email
- Broken access control
Not analysed yet 13 Nov 2025
CVE-2025-24727 CVE record

CVSS 5.9 Medium

WordPress Contact Form to Email Plugin <= 1.3.52 - Cross Site Scripting (XSS) vulnerability
- codepeople Contact Form Email
- Cross-site scripting (XSS)
Not analysed yet 24 Jan 2025
CVE-2023-48318 CVE record

CVSS 5.3 Medium

WordPress Contact Form Email plugin <= 1.3.41 - Captcha Bypass vulnerability
- CodePeople Contact Form Email
- Authentication bypass
Not analysed yet 4 Jun 2024
CVE-2023-28494 CVE record

CVSS 4.3 Medium

WordPress Contact Form Email plugin <= 1.3.31 - Missing Authorization Leading To Feedback Submission Vulnerability
- CodePeople Contact Form Email
- Broken access control
Not analysed yet 4 Jun 2024
CVE-2024-31302 CVE record

CVSS 5.3 Medium

WordPress Contact Form Email plugin <= 1.3.44 - Sensitive Data Exposure vulnerability
- CodePeople Contact Form Email
- Information disclosure
Not analysed yet 10 Apr 2024