Login Request a demo
CF
Product
Contact Form
by Fluentforms · last CVE Dec 14, 2024
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities19In the news0Timeline
Severity mix
Critical 3High 3Medium 13Low 0
Severity
All severities19Critical3High3Medium13Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Contact Form to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-4709
6.4
0%
May 18
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: before 5.1.17
CVE-2024-10646
6.1
0%
Dec 14
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.2.6 - Unauthenticated Stored Cross-Site Scripting via Form Subject
Affected: before 5.2.7
CVE-2024-9651
6.1
0%
Dec 9
Contact Form Plugin by Fluent Forms < 5.2.1 - Admin+ Stored XSS
Affected: before 5.2.1
CVE-2024-6703
5.4
0%
Jul 27
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Welcome Screen Fields
Affected: before 5.1.20
CVE-2024-2772
5.4
0%
May 18
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.13 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Affected: before 5.1.14
CVE-2023-6957
5.4
0%
Mar 13
Fluent Forms <= 5.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: before 5.1.10
CVE-2023-0546
5.4
0%
Apr 10
The Contact Form Plugin WordPress plugin before 4.3.25 does not properly sanitize and escape the srcdoc attribute in iframes in it's custom HTML field type, allowing a logged in…
Affected: before 4.3.25
CVE-2024-9528
4.8
0%
Oct 5
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Form Manager+) Stored Cross-Site Scripting
Affected: before 5.1.20
CVE-2024-0618
4.8
1%
Jan 27
Fluent Forms <= 5.1.5 - Authenticated(Administrator+) Stored Cross-Site Scripting via imported form title
Affected: through 5.1.5
CVE-2024-6518
4.4
0%
Jul 27
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting
Affected: before 5.1.20
CVE-2024-6520
4.4
0%
Jul 27
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting
Affected: before 5.1.20
CVE-2024-6521
4.4
0%
Jul 27
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting
Affected: before 5.1.20
CVE-2024-5053
4.3
0%
Sep 1
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.18 - Missing Authorization to Authenticated (Subscriber+) Mailchimp Integration Modification
Affected: before 5.1.19
Showing 13