Medium · 4.3 CVE-2024-24929 EUVD-2024-22292GHSA-35v2-w3c7-q3qc

WordPress WP Contact Form Plugin <= 1.6 is vulnerable to Cross Site Request Forgery (CSRF)

Published Feb 12, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Ryan Duff, Peter Westwood Product: WP Contact Form

Description

Cross-Site Request Forgery (CSRF) vulnerability in Ryan Duff, Peter Westwood WP Contact Form.This issue affects WP Contact Form: from n/a through 1.6.

Affected products

Vendor	Product	Affected	Fixed
Ryan Duff, Peter Westwood	WP Contact Form	≤ 1.6	—

References

https://patchstack.com/database/vulnerability/wp-contact-form/wordpress-wp-contact-form-plugin-1-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry