Contact Form To Any Api

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:itpathsolutions:contact_form_to_any_api:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorItpathsolutions (224949a7-ce8b-5d9c-9aa6-76f12f4e03e6)
ProductContact Form To Any Api (0e9fce2b-9f37-5569-9060-22ab651a689f)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-7617 vulnerable 2026-06-08 06:58:22.851595 Contact Form to Any API <= 1.2.4 - Unauthenticated Stored Cross-Site Scripting via Contact Form
HIGH (7.2)
The Contact Form to Any API plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Contact Form 7 form fields in all versions up to, and including, 1.2.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2024-09-25T02:05:08.929Z
Updated: 2026-04-08T16:46:42.484Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32741 vulnerable 2026-06-08 06:04:47.163305 WordPress Contact Form to Any API Plugin <= 1.1.2 is vulnerable to SQL Injection
HIGH (7.6)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in IT Path Solutions PVT LTD Contact Form to Any API allows SQL Injection.This issue affects Contact Form to Any API: from n/a through 1.1.2.
Published: 2023-11-03T23:04:23.323Z
Updated: 2026-04-29T09:51:49.584Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.