| CVE-2026-115303 |
The Contact Form by Supsystic WordPress plugin before 1.11.1 does not strip CR/LF characters or re-validate submitted…
|
3.7
Faible
|
29 oct. 2026 |
| CVE-2026-115300 |
The Contact Form by Supsystic WordPress plugin before 1.11.1 does not validate a CSRF token or request origin on two…
|
4.3
Moyenne
|
29 oct. 2026 |
| CVE-2026-115301 |
The Contact Form by Supsystic WordPress plugin before 1.11.1 does not sandbox the template engine used to render its…
|
7.2
Élevée
|
29 oct. 2026 |
| CVE-2026-115302 |
The Contact Form by Supsystic WordPress plugin before 1.11.1 does not restrict access to an AJAX action that deletes…
|
5.3
Moyenne
|
29 oct. 2026 |
| CVE-2026-115299 |
The Contact Form by Supsystic WordPress plugin before 1.11.1 does not verify a CSRF nonce before saving its mail…
|
5.4
Moyenne
|
29 oct. 2026 |
| CVE-2025-15705 |
The Contact Form by Supsystic WordPress plugin before 1.8.0 does not sanitise and escape a form name, allowing users…
|
3.5
Faible
|
25 oct. 2026 |