Simple Contact Forms

Vulnerabilities 2Slug simple-contact-formsLatest version 1.6.4WordPress.org →

Minimum safe version

—

No explicit fix version available

Latest available1.6.4 ✗⚠ 2 vulnerabilities have no fix
High 8.1 Unfixed
2025-11-06≤ 1.6.4

CVE-2025-60197

CVEWordfence
High 7.1 Unfixed
2025-03-31≤ 1.6.4

WordPress Simple Contact Forms plugin <= 1.6.4 - CSRF to Stored XSS vulnerability

CVEPatchstackWordfenceEUVD