Contact Form Maker

contact-form-maker · plugin

Known security vulnerabilities for Contact Form Maker. Find out in seconds which version runs on your site with WP Lens.

3 known vulnerabilities

latest Jun 4, 2026

Vulnerabilities

CVE-2019-11591
The WebDorado Contact Form plugin before 1.13.5 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with resultant l
High 8.8
CVE-2018-25347
WordPress Contact Form Maker Plugin 1.12.20 SQL Injection
High 7.1
CVE-2019-25734
Contact Form by WD 1.13.1 CSRF to Local File Inclusion
Medium 5.1