Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-32483 EUVD-2026-15825GHSA-3hw3-mqq8-mf6r

WordPress Contact Form Email plugin <= 1.3.63 - Broken Access Control vulnerability

Published Mar 25, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Vendor: codepeople Product: Contact Form Email

Description

Missing Authorization vulnerability in codepeople Contact Form Email contact-form-to-email allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form Email: from n/a through <= 1.3.63.

Affected products

VendorProductAffectedFixed
codepeople Contact Form Email ≤ <= 1.3.63 —

References