Skip to content
OpenAdvisories

Vendor

NickDuncan

3 known vulnerabilities.

Products

Contact Form 2 Nifty Backups 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-30935

    WordPress Contact Form plugin <= 2.0.12 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NickDuncan Contact Form contact-form-ready allows DOM-Based XSS.This issue affects Contact Form: from n/a through <= 2.0.12.

    NickDuncan Contact Form
  • Medium 4.3
    CVE-2023-44231

    WordPress Contact Form Plugin <= 2.0.10 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in NickDuncan Contact Form plugin <= 2.0.10 versions.

    NickDuncan Contact Form