Advisories · Technology

Contact Forms by Cimatti.

Every CVE that names Contact Forms by Cimatti among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-49069 CVE record

CVSS 4.3 Medium

WordPress Contact Forms by Cimatti plugin <= 1.9.8 - Cross Site Request Forgery (CSRF) vulnerability
- Contact Forms by Cimatti
- Cross-site request forgery (CSRF)
Not analysed yet 2 Jun 2025
CVE-2024-12184 CVE record

CVSS 5.3 Medium

WordPress Contact Forms by Cimatti <= 1.9.4 - Missing Authorization to Unauthenticated Form Submission Download
- Contact Forms by Cimatti
- Broken access control
Not analysed yet 1 Feb 2025
CVE-2024-10521 CVE record

CVSS 4.3 Medium

WordPress Contact Forms by Cimatti <= 1.9.2 - Cross-Site Request Forgery via process_bulk_action Function
- Contact Forms by Cimatti
- Cross-site request forgery (CSRF)
Not analysed yet 27 Nov 2024
CVE-2024-30549 CVE record

CVSS 5.9 Medium

WordPress Contact Forms by Cimatti plugin <= 1.8.0 - Cross Site Scripting (XSS) vulnerability
- Contact Forms by Cimatti
- Cross-site scripting (XSS)
Not analysed yet 31 Mar 2024
CVE-2023-2563 CVE record

CVSS 4.3 Medium

WordPress Contact Forms by Cimatti <= 1.5.7 - Cross-Site Request Forgery via _accua_forms_form_edit_action
- Contact Forms by Cimatti
- Cross-site request forgery (CSRF)
Not analysed yet 13 Jun 2023