CI
Vendor
Cimatti
3 products with CVEs on record
14
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2025-49069
CF
Contact Forms by Cimatti
cimatti
4.3
0%
Jun 2WordPress Contact Forms by Cimatti plugin <= 1.9.8 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-12184
CF
Contact Forms by Cimatti
cimatti
5.3
0%
Feb 1WordPress Contact Forms by Cimatti <= 1.9.4 - Missing Authorization to Unauthenticated Form Submission Download
CVE-2023-35051
WC
Wordpress Contact Forms
Cimatti
8.8
1%
Dec 13WordPress Contact Forms by Cimatti plugin <= 1.5.7 - Broken Access Control vulnerability
CVE-2024-10521
CF
Contact Forms by Cimatti
cimatti
4.3
0%
Nov 27WordPress Contact Forms by Cimatti <= 1.9.2 - Cross-Site Request Forgery via process_bulk_action Function
CVE-2024-30549
CF
Contact Forms by Cimatti
cimatti
4.8
0%
Mar 31WordPress Contact Forms by Cimatti plugin <= 1.8.0 - Cross Site Scripting (XSS) vulnerability
CVE-2024-29117
WC
Wordpress Contact Forms
Cimatti
6.1
0%
Mar 19WordPress Contact Forms by Cimatti plugin <= 1.7.0 - Unauthenticated Stored Cross Site Scripting (XSS) vulnerability
CVE-2023-47230
WC
Wordpress Contact Forms
Cimatti
8.8
0%
Nov 13Cross-Site Request Forgery (CSRF) vulnerability in Cimatti Consulting WordPress Contact Forms by Cimatti plugin <= 1.6.0 versions
CVE-2023-2563
CF
Contact Forms
Cimatti
4.3
0%
Jun 13The WordPress Contact Forms by Cimatti plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.7
CVE-2023-28789
WC
Wordpress Contact Forms
Cimatti
6.1
0%
Apr 7Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Cimatti Consulting WordPress Contact Forms by Cimatti plugin <= 1.5.4 versions
CVE-2023-28781
WC
Wordpress Contact Forms
Cimatti
6.1
0%
Apr 7Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Cimatti Consulting WordPress Contact Forms by Cimatti plugin <= 1.5.4 versions
CVE-2021-24744
CF
Contact Forms
Cimatti
4.8
1%
Oct 25The WordPress Contact Forms by Cimatti WordPress plugin before 1.4.12 does not sanitise and escape the Form Title before outputting it in some admin pages