Skip to content
OpenAdvisories

Product · Saad Iqbal

Quick Contact Form

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.8
    CVE-2025-12718

    Quick Contact Form <= 8.2.6 - Unauthenticated Open Mail Relay

    The Quick Contact Form plugin for WordPress is vulnerable to Open Mail Relay in all versions up to, and including, 8.2.6. This is due to the 'qcf_validate_form' AJAX endpoint allowing a user controlled parameter to set the 'from' email address. This makes it …

    Saad Iqbal Quick Contact Form Web / CMS
  • Medium 4.3
    CVE-2025-67471

    WordPress Quick Contact Form plugin <= 8.2.5 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Saad Iqbal Quick Contact Form quick-contact-form allows Cross Site Request Forgery.This issue affects Quick Contact Form: from n/a through <= 8.2.5.

    Saad Iqbal Quick Contact Form