What’s Vulnerable › Products

supsystic Contact Form by Supsystic vulnerabilities

13 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your supsystic Contact Form by Supsystic version is affected

Latest supsystic Contact Form by Supsystic vulnerabilities

• CVE-2026-115591 — WordPress Contact Form by Supsystic plugin <= 1.10.5 - Sensitive Data Exposure vulnerability (CVSS 7.5)
• CVE-2026-115595 — WordPress Contact Form by Supsystic plugin <= 1.10.7 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2026-83625 — Contact Form by Supsystic <= 1.10.2 - Unauthenticated Stored Cross-Site Scripting via IP Address Header (CVSS 7.2)
• CVE-2026-73379 — WordPress Contact Form by Supsystic plugin < 1.10.0 - Bypass Vulnerability vulnerability (CVSS 6.5)
• CVE-2026-73378 — WordPress Contact Form by Supsystic plugin < 1.10.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-4257 — Contact Form by Supsystic <= 1.7.36 - Unauthenticated Server-Side Template Injection via Prefill Functionality (CVSS 9.8)
• CVE-2025-52753 — WordPress Contact Form by Supsystic plugin <= 1.7.36 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2024-13452 — Contact Form by Supsystic <= 1.7.29 - Cross-Site Request Forgery to Stored Cross-Site Scripting via saveAsCopy AJAX Action (CVSS 6.1)
• CVE-2024-48046 — WordPress Contact Form by Supsystic plugin <= 1.7.28 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9)
• CVE-2024-48042 — WordPress Contact Form by Supsystic plugin <= 1.7.28 - Remote Code Execution (RCE) vulnerability (CVSS 9.1)
• CVE-2023-45068 — WordPress Contact Form by Supsystic Plugin <= 1.7.27 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)
• CVE-2023-2528 — Contact Form by Supsystic <= 1.7.24 - Cross-Site Request Forgery via AJAX action (CVSS 8.8)
• CVE-2021-24276 — Contact Form by Supsystic < 1.7.15 - Reflected Cross-Site scripting (XSS) (CVSS 6.1)