Contact Form Entries
CRM Perks
Developer
1.4.6
Latest version
60,000
Installations
No date
Last updated
Vulnerability history
0 present
10 patched
5 Mitigation rules
- Missing Authorization to Unauthenticated Form Data Exfiltration via CSV Export vulnerability<= 1.4.5Jan 28, 2026
- Unauthenticated PHP Object Injection to Arbitrary File Deletion vulnerability<= 1.4.3Dec 31, 2025
- Unauthenticated Stored Cross-Site Scripting vulnerability<= 1.3.8Apr 23, 2024
- Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode vulnerability<= 1.3.3Mar 7, 2024
- Authenticated (Administrator+) Arbitrary File Upload vulnerability<= 1.3.2Jan 31, 2024
- Cross Site Scripting (XSS) vulnerability<= 1.3.0May 22, 2023
- Auth. SQL Injection (SQLi) vulnerability<= 1.3.0May 22, 2023
- Unauthenticated Persistent Cross-Site Scripting (XSS) vulnerability<= 1.2.3Nov 14, 2021
- Authenticated Persistent Cross-Site Scripting (XSS) vulnerability<= 1.2.3Nov 14, 2021
- Multiple Authenticated Reflected Cross-Site Scripting (XSS) vulnerabilities<= 1.2.3Nov 14, 2021