Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Contact Forms by Cimatti — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in Contact Forms by Cimatti, with AI-generated Chinese analysis, references, and POCs.

Vendor: cimatti

CVE IDTitleCVSSSeverityPublished
CVE-2025-49069 WordPress Contact Forms by Cimatti plugin <= 1.9.8 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 4.3 Medium2025-06-02
CVE-2024-12184 WordPress Contact Forms by Cimatti <= 1.9.4 - Missing Authorization to Unauthenticated Form Submission Download CWE-862 5.3 Medium2025-02-01
CVE-2023-35051 WordPress Contact Forms by Cimatti plugin <= 1.5.7 - Broken Access Control vulnerability CWE-862 5.4 Medium2024-12-13
CVE-2024-10521 WordPress Contact Forms by Cimatti <= 1.9.2 - Cross-Site Request Forgery via process_bulk_action Function CWE-352 4.3 Medium2024-11-27
CVE-2024-30549 WordPress Contact Forms by Cimatti plugin <= 1.8.0 - Cross Site Scripting (XSS) vulnerability CWE-79 5.4AIMediumAI2024-03-31
CVE-2024-29117 WordPress Contact Forms by Cimatti plugin <= 1.7.0 - Unauthenticated Stored Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High2024-03-19
CVE-2023-2563 WordPress Contact Forms by Cimatti <= 1.5.7 - Cross-Site Request Forgery via _accua_forms_form_edit_action CWE-352 4.3 Medium2023-06-13

All 7 known CVE vulnerabilities affecting Contact Forms by Cimatti with full Chinese analysis, references, and POCs where available.