Wpkube

Simple Basic Contact Form

4 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.8

CVE-2024-12716

Exploit
  • EPSS 0.06%
  • Published 15.05.2025 20:15:36
  • Last modified 11.06.2025 19:57:55

The Simple Basic Contact Form WordPress plugin before 20250114 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capabi...

6.5

CVE-2024-4144

  • EPSS 1.72%
  • Published 14.05.2024 16:17:33
  • Last modified 21.11.2024 09:42:16

The Simple Basic Contact Form plugin for WordPress for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 20240502. This allows unauthenticated attackers to execute arbitrary shortcodes. The severity and ex...

6.1

CVE-2024-4150

  • EPSS 1.64%
  • Published 14.05.2024 15:42:59
  • Last modified 21.11.2024 09:42:17

The Simple Basic Contact Form plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘scf_email’ parameter in versions up to, and including, 20221201 due to insufficient input sanitization and output escaping. This makes it poss...

4.8

CVE-2022-4226

Exploit
  • EPSS 0.16%
  • Published 26.12.2022 13:15:13
  • Last modified 14.04.2025 14:15:22

The Simple Basic Contact Form WordPress plugin before 20221201 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capabi...