WordPress plugin
SimpleForm – Contact form made simple security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium1
- Low0
All SimpleForm – Contact form made simple vulnerabilities
Nothing in this view
No vulnerabilities match this filter. Show all.
SimpleForm – Contact form made simple: common questions
Does SimpleForm – Contact form made simple have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in SimpleForm – Contact form made simple: 1 medium. At least one is not fixed in the latest version.
How do I check which version of SimpleForm – Contact form made simple I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent SimpleForm – Contact form made simple vulnerability?
CVE-2024-10883, published Nov 15, 2024: SimpleForm – Contact form made simple <= 2.2.0 - Reflected Cross-Site Scripting. Severity: Medium (CVSS 6.1).
Is any SimpleForm – Contact form made simple vulnerability listed in CISA KEV?
No. None of the known SimpleForm – Contact form made simple vulnerabilities is currently listed in the CISA KEV catalog.