CP Contact Form with Paypal vulnerabilities | LiveThreat CVE Feed

Product

CP Contact Form with Paypal

by codepeople · last CVE Mar 13, 2026

CVEs

On KEV

8.8

Max CVSS

New 30D

Severity mix

Critical 0High 4Medium 2Low 0

Severity

Exploitation

Watch

Add CP Contact Form with Paypal to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-27460	8.8	0%	Jun 3	Missing Authorization vulnerability in CodePeople, paypaldev CP Contact Form with Paypal allows Functionality Misuse.This issue affects CP Contact Form with Paypal: from n/a… Affected: before 1.3.35
CVE-2015-9233	8.8	1%	Sep 30	The cp-contact-form-with-paypal (aka CP Contact Form with PayPal) plugin before 1.1.6 for WordPress has CSRF with resultant XSS, related to cp_contactformpp.php and… Affected: before 1.1.6
CVE-2026-32433	8.5	0%	Mar 13	WordPress CP Contact Form with Paypal plugin <= 1.3.61 - SQL Injection vulnerability Affected: through 1.3.61
CVE-2025-13384	7.5	0%	Nov 22	CP Contact Form with PayPal <= 1.3.56 - Missing Authorization to Unauthenticated Arbitrary Payment Confirmation Affected: through 1.3.56