Advisories · Technology

Contact Form by Supsystic.

Every CVE that names Contact Form by Supsystic among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-115303 CVE record

CVSS 3.7 Low

Contact Form by Supsystic < 1.11.1 - Unauthenticated CRLF / Email Header Injection via Reply-To Field Mapping
- Contact Form by Supsystic
- Other injection
Not analysed yet 29 Oct 2026
CVE-2026-115302 CVE record

CVSS 5.3 Medium

Contact Form by Supsystic < 1.11.1 - Unauthenticated Arbitrary Statistics Deletion
- Contact Form by Supsystic
- Broken access control
Not analysed yet 29 Oct 2026
CVE-2026-115301 CVE record

CVSS 7.2 High

Contact Form by Supsystic < 1.11.1 - Admin+ SSTI via Form Text Block
- Contact Form by Supsystic
- Code injection
Not analysed yet 29 Oct 2026
CVE-2026-115300 CVE record

CVSS 4.3 Medium

Contact Form by Supsystic < 1.11.1 - Contact Submission and Statistics Deletion via CSRF
- Contact Form by Supsystic
- Cross-site request forgery (CSRF)
Not analysed yet 29 Oct 2026
CVE-2026-115299 CVE record

CVSS 5.4 Medium

Contact Form by Supsystic < 1.11.1 - Arbitrary Plugin Settings Update via CSRF
- Contact Form by Supsystic
- Cross-site request forgery (CSRF)
Not analysed yet 29 Oct 2026
CVE-2026-115591 CVE record

CVSS 7.5 High

WordPress Contact Form by Supsystic plugin <= 1.10.5 - Sensitive Data Exposure vulnerability
- Contact Form by Supsystic
- Information disclosure
Not analysed yet 28 Oct 2026
CVE-2026-115595 CVE record

CVSS 5.3 Medium

WordPress Contact Form by Supsystic plugin <= 1.10.7 - Broken Access Control vulnerability
- Contact Form by Supsystic
- Broken access control
Not analysed yet 26 Oct 2026
CVE-2025-15705 CVE record

CVSS 3.5 Low

Contact Form by Supsystic < 1.8.0 - Admin+ Stored XSS
- Contact Form by Supsystic
- Cross-site scripting (XSS)
Not analysed yet 25 Oct 2026
CVE-2026-73379 CVE record

CVSS 6.5 Medium

WordPress Contact Form by Supsystic plugin < 1.10.0 - Bypass Vulnerability vulnerability
- Contact Form by Supsystic
- Authentication bypass
Not analysed yet 18 Aug 2026
CVE-2026-73378 CVE record

CVSS 7.1 High

WordPress Contact Form by Supsystic plugin < 1.10.0 - Cross Site Scripting (XSS) vulnerability
- Contact Form by Supsystic
- Cross-site scripting (XSS)
Not analysed yet 18 Aug 2026
CVE-2025-52753 CVE record

CVSS 7.1 High

WordPress Contact Form by Supsystic plugin <= 1.7.36 - Cross Site Scripting (XSS) vulnerability
- Contact Form by Supsystic
- Cross-site scripting (XSS)
Not analysed yet 22 Oct 2025
CVE-2024-48046 CVE record

CVSS 5.9 Medium

WordPress Contact Form by Supsystic plugin <= 1.7.28 - Cross Site Scripting (XSS) vulnerability
- Contact Form by Supsystic
- Cross-site scripting (XSS)
Not analysed yet 17 Oct 2024
CVE-2024-48042 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

WordPress Contact Form by Supsystic plugin <= 1.7.28 - Remote Code Execution (RCE) vulnerability
- Contact Form by Supsystic
- CWE-82
Not analysed yet 16 Oct 2024
CVE-2023-45068 CVE record

CVSS 5.4 Medium

WordPress Contact Form by Supsystic Plugin <= 1.7.27 is vulnerable to Cross Site Request Forgery (CSRF)
- Contact Form by Supsystic
- Cross-site request forgery (CSRF)
Not analysed yet 12 Oct 2023
CVE-2021-24276 CVE record

Contact Form by Supsystic < 1.7.15 - Reflected Cross-Site scripting (XSS)
- Contact Form by Supsystic
- Cross-site scripting (XSS)
Not analysed yet 5 May 2021