Skip to content
OpenAdvisories

Vendor

supsysticcom

15 known vulnerabilities.

Products

Contact Form by Supsystic 4 Data Tables Generator by Supsystic 3 Popup by Supsystic 2 Easy Google Maps 2 Smart Popup by Supsystic 2 Social Share Buttons by Supsystic (WordPress plugin) 1 WordPress Flipbook by Supsystic 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-4257 Public exploit Scanner template EPSS 41%

    Contact Form by Supsystic <= 1.7.36 - Unauthenticated Server-Side Template Injection via Prefill Functionality

    The Contact Form by Supsystic plugin for WordPress is vulnerable to Server-Side Template Injection (SSTI) leading to Remote Code Execution (RCE) in all versions up to, and including, 1.7.36. This is due to the plugin using the Twig `Twig_Loader_String` templa…

    supsysticcom Contact Form by Supsystic Web / CMS