Skip to content
OpenAdvisories

Product · WPKube

Simple Basic Contact Form

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2024-4144

    Simple Basic Contact Form <= 20240502 - Unauthenticated Arbitrary Shortcode Execution

    The Simple Basic Contact Form plugin for WordPress for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 20240502. This allows unauthenticated attackers to execute arbitrary shortcodes. The severity and exploitabil…

    WPKube Simple Basic Contact Form Web / CMS
  • Medium 6.1
    CVE-2024-4150

    Simple Basic Contact Form <= 20221201 - Reflected Cross-Site Scripting

    The Simple Basic Contact Form plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘scf_email’ parameter in versions up to, and including, 20221201 due to insufficient input sanitization and output escaping. This makes it possible for …

    WPKube Simple Basic Contact Form Web / CMS