Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
contact-form-to-db
WordPress
· Plugin
7 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress <= 1.7.6 - Unauthenticated Stored Cross-Site Scripting
CVE-2026-39745
contact-form-to-db
WordPress
High
No fix reported
2026-10-14
Contact Form to DB by BestWebSoft <= 1.7.5 - Unauthenticated Stored Cross-Site Scripting via cntctfrm_contact_dropdown Parameter
CVE-2026-13359
contact-form-to-db
WordPress
High
Fix reported
2026-09-09
Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress <= 1.7.2 - Authenticated (Author+) SQL Injection
CVE-2024-35678
contact-form-to-db
WordPress
Critical
Fix reported
2024-06-13
Contact Form to DB by BestWebSoft <= 1.7.0 - Authenticated (Contributor+) SQL Injection via cntctfrmtdb_department
CVE-2023-29096
contact-form-to-db
WordPress
High
Fix reported
2024-01-22
Contact Form to DB by BestWebSoft <= 1.7.1 - Authenticated (Administrator+) SQL Injection via 's'
CVE-2023-36508
contact-form-to-db
WordPress
High
Fix reported
2024-01-22
Contact Form to DB <= 1.5.6 - Multiple Cross-Site Scripting
CVE-2017-18492
contact-form-to-db
WordPress
Medium
Fix reported
2024-01-22
Contact Form to DB <= 1.7.0 - Multiple Cross-Site Scripting
contact-form-to-db
WordPress
Medium
Fix reported
2024-01-22
