Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now

Contact Form by Supsystic — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in Contact Form by Supsystic, with AI-generated Chinese analysis, references, and POCs.

Vendor: Supsystic

CVE IDTitleCVSSSeverityPaused
CVE-2026-4257 Contact Form by Supsystic <= 1.7.36 - Unauthenticated Server-Side Template Injection via Prefill Functionality CWE-94 9.8 Critical2026-03-30
CVE-2025-52753 WordPress Contact Form by Supsystic plugin <= 1.7.36 - Cross Site Scripting (XSS) vulnerability CWE-79 6.1AIMediumAI2025-10-22
CVE-2024-13452 Contact Form by Supsystic <= 1.7.29 - Cross-Site Request Forgery to Stored Cross-Site Scripting via saveAsCopy AJAX Action CWE-79 6.1 Medium2025-04-16
CVE-2024-48046 WordPress Contact Form by Supsystic plugin <= 1.7.28 - Cross Site Scripting (XSS) vulnerability CWE-79 5.9 Medium2024-10-17
CVE-2024-48042 WordPress Contact Form by Supsystic plugin <= 1.7.28 - Remote Code Execution (RCE) vulnerability CWE-82 9.1 Critical2024-10-16
CVE-2023-45068 WordPress Contact Form by Supsystic Plugin <= 1.7.27 is vulnerable to Cross Site Request Forgery (CSRF) CWE-352 5.4 Medium2023-10-12
CVE-2023-2528 Contact Form by Supsystic <= 1.7.24 - Cross-Site Request Forgery via AJAX action CWE-352 5.4 Medium2023-05-16
CVE-2021-24276 Contact Form by Supsystic < 1.7.15 - Reflected Cross-Site scripting (XSS) CWE-79 6.1 -2021-05-05

All 8 known CVE vulnerabilities affecting Contact Form by Supsystic with full Chinese analysis, references, and POCs where available.