Aller au contenu
Se connecter
5.8 Moyenne

CVE-2025-12718 The Quick Contact Form plugin for WordPress is vulnerable to Open Mail Relay in all versions up to, and including, 8.2.6

Description

The Quick Contact Form plugin for WordPress is vulnerable to Open Mail Relay in all versions up to, and including, 8.2.6. This is due to the 'qcf_validate_form' AJAX endpoint allowing a user controlled parameter to set the 'from' email address. This makes it possible for unauthenticated attackers to send emails to arbitrary recipients utilizing the server. The information is limited to the contact form submission details.

Produits et versions touchés

Produit Versions touchées Corrigé en
Quick Contact Form 8.2 premières → 8.2.6 Pas de correctif indiqué

Autres CVE de Quick Contact Form

Les 2 CVE de Quick Contact Form →
CVE-2022-4974 The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request… 6.3 Moyenne
Suivre cette CVE