Approved changes feed: RSS · Atom

cpe:2.3:a:cimatti_consulting:contact_forms_by_cimatti:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCimatti Consulting (e828c724-1b1c-5aa2-b806-f3132b24d286)
ProductContact Forms By Cimatti (841d074d-0848-50d4-88d1-e2a45398ae99)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-49069 vulnerable 2026-06-08 07:29:12.542989 WordPress Contact Forms by Cimatti plugin <= 1.9.8 - Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in cimatti Contact Forms by Cimatti contact-forms allows Cross Site Request Forgery.This issue affects Contact Forms by Cimatti: from n/a through <= 1.9.8.
Published: 2025-06-02T18:49:25.588Z
Updated: 2026-04-28T16:12:58.612Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29117 vulnerable 2026-06-08 06:33:28.771019 WordPress Contact Forms by Cimatti plugin <= 1.7.0 - Unauthenticated Stored Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cimatti Consulting Contact Forms by Cimatti allows Stored XSS.This issue affects Contact Forms by Cimatti: from n/a through 1.7.0.
Published: 2024-03-19T14:52:08.382Z
Updated: 2026-04-28T16:09:17.082Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35051 vulnerable 2026-06-08 06:06:26.450871 WordPress Contact Forms by Cimatti plugin <= 1.5.7 - Broken Access Control vulnerability
MEDIUM (5.4)
Missing Authorization vulnerability in Cimatti Consulting Contact Forms by Cimatti allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Forms by Cimatti: from n/a through 1.5.7.
Published: 2024-12-13T14:23:39.351Z
Updated: 2026-04-28T16:08:29.352Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.