What’s Vulnerable › Products

cimatti Contact Forms by Cimatti vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your cimatti Contact Forms by Cimatti version is affected

Latest cimatti Contact Forms by Cimatti vulnerabilities

• CVE-2025-49069 — WordPress Contact Forms by Cimatti plugin <= 1.9.8 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
• CVE-2024-12184 — WordPress Contact Forms by Cimatti <= 1.9.4 - Missing Authorization to Unauthenticated Form Submission Download (CVSS 5.3)
• CVE-2023-35051 — WordPress Contact Forms by Cimatti plugin <= 1.5.7 - Broken Access Control vulnerability (CVSS 8.8)
• CVE-2024-10521 — WordPress Contact Forms by Cimatti <= 1.9.2 - Cross-Site Request Forgery via process_bulk_action Function (CVSS 4.3)
• CVE-2024-30549 — WordPress Contact Forms by Cimatti plugin <= 1.8.0 - Cross Site Scripting (XSS) vulnerability (CVSS 4.8)
• CVE-2024-29117 — WordPress Contact Forms by Cimatti plugin <= 1.7.0 - Unauthenticated Stored Cross Site Scripting (XSS) vulnerability (CVSS 6.1)
• CVE-2023-47230 — WordPress Contact Forms by Cimatti Plugin <= 1.6.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)
• CVE-2023-28789 — WordPress Contact Forms by Cimatti Plugin <= 1.5.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.1)
• CVE-2023-28781 — WordPress Contact Forms by Cimatti Plugin <= 1.5.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.1)