Medium · 4.3 CVE-2023-22694 EUVD-2023-26823GHSA-3w6v-h5wr-h9rh

WordPress BigContact Plugin <= 1.5.8 is vulnerable to Cross Site Request Forgery (CSRF)

Published Jul 10, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Arian Khosravi, Norik Davtian BigContact Contact Page plugin <= 1.5.8 versions.

Vendor	Product	Affected	Fixed
Arian Khosravi, Norik Davtian	BigContact Contact Page	≤ 1.5.8	—