What’s Vulnerable › Products

itpathsolutions Contact Form to Any API vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your itpathsolutions Contact Form to Any API version is affected

Latest itpathsolutions Contact Form to Any API vulnerabilities

• CVE-2026-15735 — Contact Form to Any API <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'cf7anyapi_form_field' Post Meta (CVSS 6.4)
• CVE-2024-7617 — Contact Form to Any API <= 1.2.4 - Unauthenticated Stored Cross-Site Scripting via Contact Form (CVSS 6.1)
• CVE-2023-32741 — WordPress Contact Form to Any API Plugin <= 1.1.2 is vulnerable to SQL Injection (CVSS 7.2)