Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Contact Form to Any API — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in Contact Form to Any API, with AI-generated Chinese analysis, references, and POCs.

Vendor: IT Path Solutions PVT LTD

CVE ID Title CVSS Severity Published
CVE-2026-18946 Contact Form to Any API < 3.0.7 - Unauthenticated Sensitive File Disclosure via Predictable Filename - - 2026-08-10
CVE-2026-15735 Contact Form to Any API <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'cf7anyapi_form_field' Post Meta CWE-79 6.4 Medium 2026-07-29
CVE-2026-39449 WordPress Contact Form to Any API plugin <= 3.0.3 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2026-06-15
CVE-2023-47871 WordPress Contact Form to Any API plugin <= 1.1.6 - Broken Access Control vulnerability CWE-862 4.3 Medium 2024-12-09
CVE-2024-7617 Contact Form to Any API <= 1.2.4 - Unauthenticated Stored Cross-Site Scripting via Contact Form CWE-79 7.2 High 2024-09-25
CVE-2024-30242 WordPress Contact Form to Any API plugin <= 1.1.8 - Auth. SQL Injection vulnerability CWE-89 8.5 High 2024-03-28
CVE-2023-32741 WordPress Contact Form to Any API Plugin <= 1.1.2 is vulnerable to SQL Injection CWE-89 7.6 High 2023-11-03

All 7 known CVE vulnerabilities affecting Contact Form to Any API with full Chinese analysis, references, and POCs where available.