Pricing
Case studies
Login
Start trial
Contact Form by Supsystic
supsystic
Developer
1.11.2
Latest version
6,000
Installations
No date
Last updated
WordPress Plugin
Active VDP
Report vulnerability
Vulnerabilities
Security Policy
Security Contributors
Vulnerability history
0 present
21 patched
7 Mitigation rules
Unauthenticated CRLF / Email Header Injection vulnerability
< 1.11.1
2 days ago
Contact Submission and Statistics Deletion vulnerability
< 1.11.1
2 days ago
Admin+ SSTI vulnerability
< 1.11.1
2 days ago
Unauthenticated Arbitrary Statistics Deletion vulnerability
< 1.11.1
2 days ago
Arbitrary Plugin Settings Update vulnerability
< 1.11.1
2 days ago
Sensitive Data Exposure vulnerability
<= 1.10.5
5 days ago
Broken Access Control vulnerability
<= 1.10.7
5 days ago
Admin+ Stored XSS vulnerability
< 1.8.0
6 days ago
Unauthenticated Stored Cross-Site Scripting via IP Address Header vulnerability
<= 1.10.2
07/09/2026
Bypass Vulnerability vulnerability
< 1.10.0
18/08/2026
Cross Site Scripting (XSS) vulnerability
< 1.10.0
18/08/2026
Unauthenticated Server-Side Template Injection via Prefill Functionality vulnerability
<= 1.7.36
31/03/2026
Cross Site Scripting (XSS) vulnerability
<= 1.7.36
18/08/2025
Cross-Site Request Forgery to Stored Cross-Site Scripting via saveAsCopy AJAX Action vulnerability
<= 1.7.29
15/04/2025
Cross Site Scripting (XSS) vulnerability
<= 1.7.28
14/10/2024
Remote Code Execution (RCE) vulnerability
<= 1.7.28
13/10/2024
Cross Site Request Forgery (CSRF) vulnerability
<= 1.7.27
03/10/2023
Cross-Site Request Forgery via AJAX action vulnerability
<= 1.7.24
16/05/2023
Reflected Cross-Site Scripting (XSS) vulnerability
<= 1.7.14
19/04/2021
SQL injection (SQLi) vulnerability
<= 1.7.5
08/02/2021
Stored Cross-Site Scripting (XSS) vulnerability
<= 1.7.5
08/02/2021