Skip to content
Noroxi

Contact Form by Supsystic

contact-form-by-supsystic · plugin

Known security vulnerabilities for Contact Form by Supsystic. Find out in seconds which version runs on your site with WP Lens.

10 known vulnerabilities

2 critical · 1 with public exploit code · latest Sep 5, 2026

Vulnerabilities

  • CVE-2026-4257

    Contact Form by Supsystic <= 1.7.36 - Unauthenticated Server-Side Template Injection via Prefill Functionality

    Critical 9.8

  • CVE-2024-48042

    WordPress Contact Form by Supsystic plugin <= 1.7.28 - Remote Code Execution (RCE) vulnerability

    Critical 9.1

  • CVE-2023-45068

    WordPress Contact Form by Supsystic Plugin <= 1.7.27 is vulnerable to Cross Site Request Forgery (CSRF)

    High 8.8

  • CVE-2023-2528

    Contact Form by Supsystic <= 1.7.24 - Cross-Site Request Forgery via AJAX action

    High 8.8

  • CVE-2026-83625

    Contact Form by Supsystic <= 1.10.2 - Unauthenticated Stored Cross-Site Scripting via IP Address Header

    High 7.2

  • CVE-2026-73378→ 1.10.0

    WordPress Contact Form by Supsystic plugin < 1.10.0 - Cross Site Scripting (XSS) vulnerability

    High 7.1

  • CVE-2025-52753

    WordPress Contact Form by Supsystic plugin <= 1.7.36 - Cross Site Scripting (XSS) vulnerability

    High 7.1

  • CVE-2026-73379→ 1.10.0

    WordPress Contact Form by Supsystic plugin < 1.10.0 - Bypass Vulnerability vulnerability

    Medium 6.5

  • CVE-2024-13452

    Contact Form by Supsystic <= 1.7.29 - Cross-Site Request Forgery to Stored Cross-Site Scripting via saveAsCopy AJAX Action

    Medium 6.1

  • CVE-2024-48046

    WordPress Contact Form by Supsystic plugin <= 1.7.28 - Cross Site Scripting (XSS) vulnerability

    Medium 5.9

← Back to directory