Skip to content
Noroxi

Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress

contact-form-to-db · plugin

Known security vulnerabilities for Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress. Find out in seconds which version runs on your site with WP Lens.

5 known vulnerabilities

1 critical · 1 with public exploit code · latest Sep 8, 2026

Vulnerabilities

  • CVE-2023-36508

    WordPress Contact Form to DB by BestWebSoft Plugin <= 1.7.1 is vulnerable to SQL Injection

    Critical 9.8

  • CVE-2024-35678

    WordPress Contact Form to DB by BestWebSoft plugin <= 1.7.2 - SQL Injection vulnerability

    High 8.8

  • CVE-2023-29096

    WordPress Contact Form to DB by BestWebSoft Plugin <= 1.7.0 is vulnerable to SQL Injection

    High 8.8

  • CVE-2026-13359

    Contact Form to DB by BestWebSoft <= 1.7.5 - Unauthenticated Stored Cross-Site Scripting via cntctfrm_contact_dropdown Parameter

    High 7.2

  • CVE-2017-18492

    The contact-form-to-db plugin before 1.5.7 for WordPress has multiple XSS issues.

    Medium 6.1

← Back to directory