Enhanced WP Contact Form

Enhanced WP Contact Form has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2023; all 2 are fixed as of September 2026. Their average CVSS score is 4.4, and the most serious one scores 4.4 out of 10. 2023 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

Every one of the 2 issues recorded for Enhanced WP Contact Form has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by Rio Darmawan.

Strategic Overview

Avg CVSSMedium

4.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Enhanced WP Contact Form vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.4CVE-2023-23812

Enhanced WP Contact Form <= 2.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2023-03-31 00:00	Enhanced WP Contact Form <= 2.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting Enhanced WP Contact Form <= 2.2.3	`CVE-2023-23812`	4.4 Medium	Rio Darmawan	Yes
2023-03-31 00:00	Enhanced WP Contact Form <= 2.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting Enhanced WP Contact Form <= 2.2.3	`N/A`	4.4 Medium	Rio Darmawan	Yes

Showing 1–2 of 2 reports