Skip to content
OpenAdvisories

Product · IT Path Solutions

Contact Form to Any API

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-15735

    Contact Form to Any API <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'cf7anyapi_form_field' Post Meta

    The Contact Form to Any API plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'cf7anyapi_form_field' Post Meta in all versions up to, and including, 3.0.6 due to insufficient input sanitization and output escaping. This makes it possible f…

    IT Path Solutions Contact Form to Any API Web / CMS
  • Medium 4.3
    CVE-2023-47871

    WordPress Contact Form to Any API plugin <= 1.1.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in IT Path Solutions Contact Form to Any API allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form to Any API: from n/a through 1.1.6.

    IT Path Solutions Contact Form to Any API