Login Request a demo
CF
Product
Contact Form
by Fluentforms · last CVE Dec 14, 2024
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities19In the news0Timeline
Severity mix
Critical 3High 3Medium 13Low 0
Severity
All severities19Critical3High3Medium13Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Contact Form to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-2771
9.8
2%
May 18
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Missing Authorization to Settings Update and Limited Privilege Escalation
Affected: before 5.1.17
CVE-2023-24410
9.8
1%
Oct 31
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Contact Form - WPManageNinja LLC Contact Form Plugin – Fastest Contact Form…
Affected: through 4.3.25
CVE-2022-3463
9.8
1%
Nov 7
The Contact Form Plugin WordPress plugin before 4.3.13 does not validate and escape fields when exporting form entries as CSV, leading to a CSV injection
Affected: before 4.3.13
CVE-2024-4157
8.8
1%
May 22
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.15 - PHP Object Injection via extractDynamicValues
Affected: before 5.1.16
CVE-2021-34620
8.8
3%
Jul 7
The WP Fluent Forms plugin < 3.6.67 for WordPress is vulnerable to Cross-Site Request Forgery leading to stored Cross-Site Scripting and limited Privilege Escalation due to a…
Affected: before 3.6.67
CVE-2024-2782
7.5
1%
May 18
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Missing Authorization to Setting Manipulation
Affected: before 5.1.17
CVE-2024-4709
6.4
0%
May 18
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: before 5.1.17
CVE-2024-10646
6.1
0%
Dec 14
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.2.6 - Unauthenticated Stored Cross-Site Scripting via Form Subject
Affected: before 5.2.7
CVE-2024-9651
6.1
0%
Dec 9
Contact Form Plugin by Fluent Forms < 5.2.1 - Admin+ Stored XSS
Affected: before 5.2.1
CVE-2024-6703
5.4
0%
Jul 27
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Welcome Screen Fields
Affected: before 5.1.20
CVE-2024-2772
5.4
0%
May 18
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.13 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Affected: before 5.1.14
CVE-2023-6957
5.4
0%
Mar 13
Fluent Forms <= 5.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: before 5.1.10
CVE-2023-0546
5.4
0%
Apr 10
The Contact Form Plugin WordPress plugin before 4.3.25 does not properly sanitize and escape the srcdoc attribute in iframes in it's custom HTML field type, allowing a logged in…
Affected: before 4.3.25
CVE-2024-9528
4.8
0%
Oct 5
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Form Manager+) Stored Cross-Site Scripting
Affected: before 5.1.20
CVE-2024-0618
4.8
1%
Jan 27
The Contact Form Plugin – Fastest Contact Form Builder Plugin for WordPress by Fluent Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via imported form…
Affected: through 5.1.5
CVE-2024-6518
4.4
0%
Jul 27
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting
Affected: before 5.1.20
CVE-2024-6520
4.4
0%
Jul 27
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting
Affected: before 5.1.20
CVE-2024-6521
4.4
0%
Jul 27
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting
Affected: before 5.1.20
CVE-2024-5053
4.3
0%
Sep 1
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.18 - Missing Authorization to Authenticated (Subscriber+) Mailchimp Integration Modification
Affected: before 5.1.19
Showing 19