Skip to content
Noroxi

Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress

contact-form-plugin · plugin

Known security vulnerabilities for Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress. Find out in seconds which version runs on your site with WP Lens.

8 known vulnerabilities

1 with public exploit code · latest Dec 9, 2025

Vulnerabilities

  • CVE-2024-2200

    Contact Form by BestWebSoft <= 4.2.8 - Reflected Cross-Site Scripting via cntctfrm_contact_subject

    Medium 6.1

  • CVE-2024-2198

    Contact Form by BestWebSoft <= 4.2.8 - Reflected Cross-Site Scripting via cntctfrm_contact_address

    Medium 6.1

  • CVE-2013-7481

    The contact-form-plugin plugin before 3.3.5 for WordPress has XSS.

    Medium 6.1

  • CVE-2017-18491

    The contact-form-plugin plugin before 4.0.6 for WordPress has multiple XSS issues.

    Medium 6.1

  • CVE-2016-10869

    The contact-form-plugin plugin before 4.0.2 for WordPress has XSS.

    Medium 6.1

  • CVE-2015-9295

    The contact-form-plugin plugin before 3.96 for WordPress has XSS.

    Medium 6.1

  • CVE-2013-7475

    The contact-form-plugin plugin before 3.52 for WordPress has XSS.

    Medium 6.1

  • CVE-2025-63056

    WordPress Contact Form by BestWebSoft plugin <= 4.3.6 - Broken Access Control vulnerability

    Medium 4.3

← Back to directory