Bestwebsoft

Contact Form

13 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2025-63056

  • EPSS 0.04%
  • Veröffentlicht 09.12.2025 14:52:32
  • Zuletzt bearbeitet 20.01.2026 15:18:38

Missing Authorization vulnerability in bestwebsoft Contact Form by BestWebSoft contact-form-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form by BestWebSoft: from n/a through <= 4.3.5.

6.1

CVE-2024-2198

  • EPSS 1.27%
  • Veröffentlicht 09.04.2024 19:15:29
  • Zuletzt bearbeitet 21.11.2024 09:09:14

The Contact Form by BestWebSoft plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘cntctfrm_contact_address’ parameter in all versions up to, and including, 4.2.8 due to insufficient input sanitization and output escaping. ...

6.1

CVE-2024-2200

  • EPSS 1.27%
  • Veröffentlicht 09.04.2024 19:15:29
  • Zuletzt bearbeitet 29.09.2025 21:56:57

The Contact Form by BestWebSoft plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘cntctfrm_contact_subject’ parameter in all versions up to, and including, 4.2.8 due to insufficient input sanitization and output escaping. ...

8.8

CVE-2012-10010

  • EPSS 0.07%
  • Veröffentlicht 09.04.2023 06:15:10
  • Zuletzt bearbeitet 21.11.2024 01:36:08

A vulnerability was found in BestWebSoft Contact Form 3.21. It has been classified as problematic. This affects the function cntctfrm_settings_page of the file contact_form.php. The manipulation leads to cross-site request forgery. It is possible to ...

6.1

CVE-2014-125095

  • EPSS 0.1%
  • Veröffentlicht 09.04.2023 06:15:10
  • Zuletzt bearbeitet 21.11.2024 02:03:47

A vulnerability was found in BestWebSoft Contact Form Plugin 1.3.4 on WordPress and classified as problematic. Affected by this issue is the function bws_add_menu_render of the file bws_menu/bws_menu.php. The manipulation of the argument bwsmn_form_e...

6.1

CVE-2013-10022

  • EPSS 0.1%
  • Veröffentlicht 05.04.2023 13:15:06
  • Zuletzt bearbeitet 21.11.2024 01:48:41

A vulnerability, which was classified as problematic, has been found in BestWebSoft Contact Form Plugin 3.51 on WordPress. Affected by this issue is the function cntctfrm_display_form/cntctfrm_check_form of the file contact_form.php. The manipulation...

5.4

CVE-2017-20055

Exploit
  • EPSS 0.27%
  • Veröffentlicht 16.06.2022 13:15:08
  • Zuletzt bearbeitet 21.11.2024 03:22:32

A vulnerability classified as problematic has been found in BestWebSoft Contact Form Plugin 4.0.0. This affects an unknown part. The manipulation leads to basic cross site scripting (Stored). It is possible to initiate the attack remotely. The exploi...

6.1

CVE-2013-7481

  • EPSS 0.19%
  • Veröffentlicht 22.08.2019 13:15:11
  • Zuletzt bearbeitet 21.11.2024 02:01:06

The contact-form-plugin plugin before 3.3.5 for WordPress has XSS.

6.1

CVE-2017-18491

  • EPSS 0.1%
  • Veröffentlicht 13.08.2019 17:15:13
  • Zuletzt bearbeitet 21.11.2024 03:20:14

The contact-form-plugin plugin before 4.0.6 for WordPress has multiple XSS issues.

6.1

CVE-2016-10869

  • EPSS 0.19%
  • Veröffentlicht 13.08.2019 17:15:12
  • Zuletzt bearbeitet 21.11.2024 02:44:56

The contact-form-plugin plugin before 4.0.2 for WordPress has XSS.