Medium
CVE-2026-75018
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 38
Reset filters
High
CVE-2026-28003
Maspik – Spam blacklist <= 2.9.1 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-13425
Database for CF7 <= 1.2.6 - Unauthenticated Stored Cross-Site Scripting via Array Form Field Values
Medium
CVE-2022-50959
Contact Form Builder, Contact Widget <= 1.6.1 - Reflected Cross-Site Scripting
Medium
CVE-2025-9979
Maspik <= 2.5.6 - Authenticated (Subscriber+) Missing Authorization to Spam Log Export
Medium
CVE-2025-9888
Maspik <= 2.5.6 - Cross-Site Request Forgery
High
CVE-2025-60197
Simple Contact Forms <= 1.6.4 - Unauthenticated Local File Inclusion
Medium
CVE-2025-49069
Contact Forms by Cimatti Plugin <= 1.9.8 - Cross-Site Request Forgery
Medium
CVE-2025-31615
Simple Contact Forms <= 1.6.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2024-12184
WordPress Contact Forms by Cimatti <= 1.9.4 - Missing Authorization to Unauthenticated Form Submission Download
Medium
CVE-2024-53806
Maspik – Spam blacklist <= 2.2.7 - Cross-Site Request Forgery to Plugin Settings Change
Medium
CVE-2024-10521
WordPress Contact Forms by Cimatti <= 1.9.2 - Cross-Site Request Forgery via process_bulk_action Function
Medium
CVE-2024-9614
Constant Contact Forms by MailMunch <= 2.1.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-9182
Maspik – Spam blacklist <= 2.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-6568
Flamix: Bitrix24 and Contact Form 7 integrations <= 3.1.0 - Unauthenticated Full Path Disclosure
Medium
CVE-2024-35747
Contact Form Builder, Contact Widget <= 2.1.7 - Authentication Request Bypass
Medium
CVE-2024-30549
Contact Forms by Cimatti <= 1.8.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2024-29117
Contact Forms by Cimatti <= 1.7.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-25101
Maspik – Spam blacklist <= 0.10.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Medium
CVE-2024-22137
Constant Contact Forms by MailMunch <= 2.0.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-52208
Constant Contact Forms <= 2.4.2 - Information Disclosure via Log Files
Medium
CVE-2023-48271
Maspik – Spam blacklist <= 0.10.3 - Bypass
Medium
CVE-2023-48272
Maspik – Spam blacklist <= 0.9.2 - Unauthenticated Stored Cross-Site Scripting via efas_add_to_log
Medium
CVE-2023-47230
Contact Forms by Cimatti <= 1.6.0 - Cross-Site Request Forgery via accua_forms_list_page_table
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.