Skip to content
OpenAdvisories

Vendor

Ali Khallad

2 known vulnerabilities.

Products

Contact Form By Mega Forms 1 Contact Form By Mega Forms (WordPress plugin) 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2025-58639

    WordPress Contact Form By Mega Forms Plugin <= 1.6.1 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in Ali Khallad Contact Form By Mega Forms mega-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form By Mega Forms: from n/a through <= 1.6.1.

    Ali Khallad Contact Form By Mega Forms
  • Medium 5.4
    CVE-2022-40191

    WordPress Contact Form By Mega Forms plugin <= 1.2.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

    Authenticated (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in Ali Khallad's Contact Form By Mega Forms plugin <= 1.2.4 at WordPress.

    Ali Khallad Contact Form By Mega Forms (WordPress plugin) Web / CMS