CF
Product
Contact Form Email
by codepeople · last CVE Oct 22, 2026
14
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 2Medium 12Low 0
Watch

Add Contact Form Email to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-20964
8.8
1%
Aug 13
The contact-form-to-email plugin before 1.2.66 for WordPress has CSRF
Affected: before 1.2.66
CVE-2026-112379
New
7.1
0%
Oct 22
WordPress Contact Form Email plugin <= 1.3.68 - Cross Site Scripting (XSS) vulnerability
Affected: through 1.3.68
Showing 2