What’s Vulnerable › Products

codepeople Contact Form Email vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your codepeople Contact Form Email version is affected

Latest codepeople Contact Form Email vulnerabilities

• CVE-2026-112379 — WordPress Contact Form Email plugin <= 1.3.68 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-32483 — WordPress Contact Form Email plugin <= 1.3.63 - Broken Access Control vulnerability (CVSS 6.5)
• CVE-2025-10019 — WordPress Contact Form Email plugin <= 1.3.60 - Insecure Direct Object References (IDOR) vulnerability (CVSS 6.5)
• CVE-2025-64369 — WordPress Contact Form Email plugin <= 1.3.58 - Broken Access Control vulnerability (CVSS 6.5)
• CVE-2025-24727 — WordPress Contact Form to Email Plugin <= 1.3.52 - Cross Site Scripting (XSS) vulnerability (CVSS 4.8)
• CVE-2023-48318 — WordPress Contact Form Email plugin <= 1.3.41 - Captcha Bypass vulnerability (CVSS 6.5)
• CVE-2023-28494 — WordPress Contact Form Email plugin <= 1.3.31 - Missing Authorization Leading To Feedback Submission Vulnerability (CVSS 4.3)
• CVE-2024-31302 — WordPress Contact Form Email plugin <= 1.3.44 - Sensitive Data Exposure vulnerability (CVSS 5.3)
• CVE-2023-5955 — Contact Form Email < 1.3.44 - Editor+ Stored Cross-Site Scripting (CVSS 4.8)
• CVE-2023-2718 — Contact Form Email < 1.3.38 - Unauthenticated Stored Cross-Site Scripting (CVSS 5.4)
• CVE-2021-42361 — Contact Form Email <= 1.3.24 Authenticated Stored Cross-Site Scripting (CVSS 2.1)
• CVE-2018-20964 — (CVSS 8.8)
• CVE-2018-20963 — (CVSS 6.1)
• CVE-2019-9646 — (CVSS 6.1)