Contact Form Generator
Approved changes feed: RSS · Atom
cpe:2.3:a:creative-solutions:contact_form_generator:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Creative Solutions (50239836-a95b-5d2f-b4d1-6e38fbe378e0) |
|---|---|
| Product | Contact Form Generator (c794d60c-3375-5ac1-acb4-064c8157f864) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-37988 |
vulnerable | 2026-06-08 06:08:16.641790 |
WordPress Contact Form Generator Plugin <= 2.5.5 is vulnerable to Cross Site Scripting (XSS)
HIGH (7.1)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Creative Solutions Contact Form Generator plugin <= 2.5.5 versions.
Published: 2023-08-10T10:39:26.542Z
Updated: 2026-04-28T16:08:33.217Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-35911 |
vulnerable | 2026-06-08 06:06:28.124937 |
WordPress Contact Form Generator Plugin <= 2.6.0 is vulnerable to SQL Injection
HIGH (8.5)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Creative Solutions Contact Form Generator : Creative form builder for WordPress allows SQL Injection.This issue affects Contact Form Generator : Creative form builder for WordPress: from n/a through 2.6.0.
Published: 2023-11-06T08:44:50.849Z
Updated: 2026-04-29T09:51:49.357Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-6965 |
vulnerable | 2026-06-08 05:06:59.948030 |
Details available
Multiple cross-site request forgery (CSRF) vulnerabilities in the Contact Form Generator plugin 2.0.1 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) create a field, (2) update a field, (3) delete a field, (4) create a form, (5) update a form, (6) delete a form, (7) create a template, (8) update a template, (9) delete a template, or (10) conduct cross-site scripting (XSS) attacks via a crafted request to the cfg_forms page in wp-admin/admin.php.
Published: 2015-09-16T14:00:00.000Z
Updated: 2024-09-16T19:41:52.993Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.