N/A
2026-03-30< 1.8.0
Contact Form by Supsystic <= 1.7.36 - Unauthenticated Server-Side Template Injection via Prefill Functionality
Contact Form by Supsystic
Minimum safe version
1.8.0
Update to 1.8.0 or later to address 15 fixable vulnerabilities
Latest available1.8.0 ✓
High 7.1
2025-10-22< 1.8.0
CVE-2025-52753
Medium 6.1
2025-04-16< 1.7.30
CVE-2024-13452
Medium 5.9
2024-10-17< 1.7.29
CVE-2024-48046
Critical 9.1
2024-10-16< 1.7.29
CVE-2024-48042
Medium 5.4
2023-10-12< 1.7.28
CVE-2023-45068
High 8.8
2023-05-16< 1.7.25
CVE-2023-2528
N/A
2021-02-08< 1.7.11
Contact Form by Supsystic <= 1.7.10 - SQL Injections
N/A
2021-10-28< 1.7.20
Contact Form by Supsystic < 1.7.20 - Authenticated (Admin+) Stored Cross-Site Scripting
N/A
< 1.7.7
Contact Form by Supsystic < 1.7.7 - Authenticated Stored Cross-Site Scripting (XSS)
N/A
< 1.7.11
Contact Form by Supsystic < 1.7.11 - Authenticated SQL Injections
N/A
< 1.7.20
Contact Form by Supsystic < 1.7.20 - Admin+ Stored Cross-Site Scripting
N/A
2021-02-08< 1.7.7
WordPress Contact Form by Supsystic plugin <= 1.7.5 - Stored Cross-Site Scripting (XSS) vulnerability
N/A
2021-02-08< 1.7.7
WordPress Contact Form by Supsystic plugin <= 1.7.5 - SQL injection (SQLi) vulnerability
Medium 6.1
2021-05-05< 1.7.15
CVE-2021-24276