Contact Bank – Contact Form Builder for WordPress

Contact Bank – Contact Form Builder for WordPress has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2014 and 2022; 5 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 6.2, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2014 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 6 of the records (100%).

5 of the records (83%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2022.

5 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

6.2/ 10

Patch Coverage83%

Open

Fixed

Get automatic notifications for all Contact Bank – Contact Form Builder for WordPress vulnerabilities before they are exploited.

Most severe open issueCVSS 5.5CVE-2022-3350

Contact Bank <= 3.0.30 - Authenticated (Administrator+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

6 records


2022-09-30 00:00	Contact Bank <= 3.0.30 - Authenticated (Administrator+) Stored Cross-Site Scripting Contact Bank <= 3.0.30	`CVE-2022-3350`	5.5 Medium	Zhang Yunpei	No
2016-08-01 00:00	Contact Bank – Contact Form Builder for WordPress < 2.1.23 - Reflected Cross-Site Scripting Contact Bank < 2.1.23	`N/A`	6.1 Medium	Yorick Koster,	Yes
2015-08-13 00:00	Contact Bank <= 2.0.225 - Reflected Cross-Site Scripting Contact Bank < 2.0.226	`N/A`	6.1 Medium	Marcin Probola	Yes
2014-11-05 00:00	Contact Bank – Contact Form Builder for WordPress <= 2.0.69 - Stored Cross-Site Scripting Contact Bank <= 2.0.69	`CVE-2014-8807`	7.2 High	Kacper Szurek	Yes
2014-08-01 00:00	PrettyPhoto Library (Multiple Plugins and Themes) <= 3.1.4 - DOM Cross-Site Scripting Contact Bank < 2.0.227	`CVE-2013-6837`	6.1 Medium	Anant Shrivastava (anantshri)	Yes
2014-04-28 00:00	Contact Bank – Contact Form Builder for WordPress <= 2.0.19 - Cross-Site Scripting Contact Bank <= 2.0.19	`CVE-2014-3841`	6.1 Medium	Anonymous	Yes

Showing 1–6 of 6 reports