CI
Vendor
Cimatti
14
CVEs
0
On KEV
0
New 30D
Products
WC8.8
Wordpress Contact Forms
Cimatti
8 CVEs0 on KEV0 new
CF5.3
Contact Forms by Cimatti
cimatti
4 CVEs0 on KEV0 new
CF4.8
Contact Forms
Cimatti
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-49069 | CF Contact Forms by Cimatti cimatti | 4.3 | Jun 2 | WordPress Contact Forms by Cimatti plugin <= 1.9.8 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2024-12184 | CF Contact Forms by Cimatti cimatti | 5.3 | Feb 1 | WordPress Contact Forms by Cimatti <= 1.9.4 - Missing Authorization to Unauthenticated Form Submission Download |
| CVE-2023-35051 | WC Wordpress Contact Forms Cimatti | 8.8 | Dec 13 | WordPress Contact Forms by Cimatti plugin <= 1.5.7 - Broken Access Control vulnerability |
| CVE-2024-10521 | CF Contact Forms by Cimatti cimatti | 4.3 | Nov 27 | WordPress Contact Forms by Cimatti <= 1.9.2 - Cross-Site Request Forgery via process_bulk_action Function |
| CVE-2024-30549 | CF Contact Forms by Cimatti cimatti | 4.8 | Mar 31 | WordPress Contact Forms by Cimatti plugin <= 1.8.0 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-29117 | WC Wordpress Contact Forms Cimatti | 6.1 | Mar 19 | WordPress Contact Forms by Cimatti plugin <= 1.7.0 - Unauthenticated Stored Cross Site Scripting (XSS) vulnerability |
| CVE-2023-47230 | WC Wordpress Contact Forms Cimatti | 8.8 | Nov 13 | Cross-Site Request Forgery (CSRF) vulnerability in Cimatti Consulting WordPress Contact Forms by Cimatti plugin <= 1.6.0 versions |
| CVE-2023-2563 | CF Contact Forms Cimatti | 4.3 | Jun 13 | The WordPress Contact Forms by Cimatti plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.7 |
| CVE-2023-28789 | WC Wordpress Contact Forms Cimatti | 6.1 | Apr 7 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Cimatti Consulting WordPress Contact Forms by Cimatti plugin <= 1.5.4 versions |
| CVE-2023-28781 | WC Wordpress Contact Forms Cimatti | 6.1 | Apr 7 | Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Cimatti Consulting WordPress Contact Forms by Cimatti plugin <= 1.5.4 versions |
| CVE-2021-24744 | CF Contact Forms Cimatti | 4.8 | Oct 25 | The WordPress Contact Forms by Cimatti WordPress plugin before 1.4.12 does not sanitise and escape the Form Title before outputting it in some admin pages |
