WP Easy Contact

PHP Object Injection Vulnerability <= 4.0.1

Authenticated (Contributor+) Stored CrossSite Scripting via noaccess_msg Parameter vulnerability <= 4.0.1

Authenticated (Contributor+) Stored CrossSite Scripting vulnerability <= 4.0.0

Authenticated Stored CrossSite Scripting (XSS) vulnerability <= 3.7.4