Skip to content
Sign in
8.5 High

CVE-2026-32433 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in codepeople CP…

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in codepeople CP Contact Form with Paypal cp-contact-form-with-paypal allows Blind SQL Injection.This issue affects CP Contact Form with Paypal: from n/a through <= 1.3.61.

Affected products and versions

Product Affected versions Fixed in
CP Contact Form with PayPal 1.3 earliest → 1.3.61 No fix stated

Other CVEs of CP Contact Form with PayPal

The 3 CVEs of CP Contact Form with PayPal →
CVE-2025-13384 The CP Contact Form with PayPal plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and… 7.5 High CVE-2024-13758 The CP Contact Form with PayPal plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up… 6.5 Medium
Track this CVE