Skip to content
OpenAdvisories

Product · IT Path Solutions

Contact Form to Any API

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.1
    CVE-2026-39449

    WordPress Contact Form to Any API plugin <= 3.0.3 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Contact Form to Any API <= 3.0.3 versions.

    IT Path Solutions Contact Form to Any API
  • High 7.2
    CVE-2024-7617

    Contact Form to Any API <= 1.2.4 - Unauthenticated Stored Cross-Site Scripting via Contact Form

    The Contact Form to Any API plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Contact Form 7 form fields in all versions up to, and including, 1.2.4 due to insufficient input sanitization and output escaping. This makes it possible for una…

    IT Path Solutions Contact Form to Any API Web / CMS
  • High 8.5
    CVE-2024-30242

    WordPress Contact Form to Any API plugin <= 1.1.8 - Auth. SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in IT Path Solutions Contact Form to Any API.This issue affects Contact Form to Any API: from n/a through 1.1.8.

    IT Path Solutions Contact Form to Any API