Contact Form by Supsystic — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in Contact Form by Supsystic, with AI-generated Chinese analysis, references, and POCs.

Vendor: Supsystic

CVE ID	Title	CVSS	Severity	Published
CVE-2026-83625	Contact Form by Supsystic <= 1.10.2 - Unauthenticated Stored Cross-Site Scripting via IP Address Header CWE-79	7.2	High	2026-09-05
CVE-2026-73379	WordPress Contact Form by Supsystic plugin < 1.10.0 - Bypass Vulnerability vulnerability CWE-288	6.5	Medium	2026-08-18
CVE-2026-73378	WordPress Contact Form by Supsystic plugin < 1.10.0 - Cross Site Scripting (XSS) vulnerability CWE-79	7.1	High	2026-08-18
CVE-2026-4257	Contact Form by Supsystic <= 1.7.36 - Unauthenticated Server-Side Template Injection via Prefill Functionality CWE-94	9.8	Critical	2026-03-30
CVE-2025-52753	WordPress Contact Form by Supsystic plugin <= 1.7.36 - Cross Site Scripting (XSS) vulnerability CWE-79	7.1	High	2025-10-22
CVE-2024-13452	Contact Form by Supsystic <= 1.7.29 - Cross-Site Request Forgery to Stored Cross-Site Scripting via saveAsCopy AJAX Action CWE-79	6.1	Medium	2025-04-16
CVE-2024-48046	WordPress Contact Form by Supsystic plugin <= 1.7.28 - Cross Site Scripting (XSS) vulnerability CWE-79	5.9	Medium	2024-10-17
CVE-2024-48042	WordPress Contact Form by Supsystic plugin <= 1.7.28 - Remote Code Execution (RCE) vulnerability CWE-82	9.1	Critical	2024-10-16
CVE-2023-45068	WordPress Contact Form by Supsystic Plugin <= 1.7.27 is vulnerable to Cross Site Request Forgery (CSRF) CWE-352	5.4	Medium	2023-10-12
CVE-2023-2528	Contact Form by Supsystic <= 1.7.24 - Cross-Site Request Forgery via AJAX action CWE-352	5.4	Medium	2023-05-16
CVE-2021-24276	Contact Form by Supsystic < 1.7.15 - Reflected Cross-Site scripting (XSS) CWE-79	6.1	-	2021-05-05

All 11 known CVE vulnerabilities affecting Contact Form by Supsystic with full Chinese analysis, references, and POCs where available.