Skip to content
OpenAdvisories
High · 7.1 CVE-2025-26560 EUVD-2025-8171GHSA-6384-w4fj-cvg5

WordPress WP Contact Form III Plugin <= 1.6.2d - Reflected Cross Site Scripting (XSS) vulnerability

Published Mar 26, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: KKWangen Product: WP Contact Form III

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KKWangen WP Contact Form III wp-contact-form-iii allows Reflected XSS.This issue affects WP Contact Form III: from n/a through <= 1.6.2d.

Affected products

VendorProductAffectedFixed
KKWangen WP Contact Form III ≤ 1.6.2d —

References