GCVE - cpe:2.3:a:webcodin:wcp_contact_form:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:webcodin:wcp_contact_form:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Webcodin (`7289c0c0-6a4c-5b43-a5ed-76ae70367e2f`)
Product	Wcp Contact Form (`10a061f1-59b2-5d76-ab0f-d2e9ed7bd5e1`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/wp-plugins/wcp-contact-form`	purl2cpe	2026-06-01 10:17:49.283385

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-32520`	vulnerable	2026-06-08 06:04:46.465369	WordPress WCP Contact Form plugin <= 3.1.0 - Broken Access Control vulnerability HIGH (7.5) Missing Authorization vulnerability in Webcodin WCP Contact Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCP Contact Form: from n/a through 3.1.0. Published: 2024-12-13T14:23:23.231Z Updated: 2026-04-28T16:08:23.318Z Open on db.gcve.eu Reference links https://patchstack.com/database/wordpress/plugin/wcp-contact-form/vulnerability/wordpress-wcp-contact-form-plugin-3-1-0-broken-access-control-vulnerability-2?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-32519`	vulnerable	2026-06-08 06:04:46.464871	WordPress WCP Contact Form plugin <= 3.1.0 - Broken Access Control vulnerability MEDIUM (4.3) Missing Authorization vulnerability in Webcodin WCP Contact Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCP Contact Form: from n/a through 3.1.0. Published: 2024-12-13T14:23:22.630Z Updated: 2026-04-28T16:08:23.365Z Open on db.gcve.eu Reference links https://patchstack.com/database/wordpress/plugin/wcp-contact-form/vulnerability/wordpress-wcp-contact-form-plugin-3-1-0-broken-access-control-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-22703`	vulnerable	2026-06-08 05:54:26.928613	WordPress WCP Contact Form Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS) HIGH (7.1) Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Webcodin WCP Contact Form plugin <= 3.1.0 versions. Published: 2023-05-15T10:28:15.609Z Updated: 2026-04-28T16:07:59.303Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/wcp-contact-form/wordpress-wcp-contact-form-plugin-3-1-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.