Creative Contact Form
Creative Contact Form has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2014 and 2025; 1 is fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 7.1, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 0 high.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Unrestricted Upload Of File With Dangerous Type.
1 of the records (50%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.
2 independent researchers contributed these findings, one record each. Creative Contact Form is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.1.42.
CVE-2025-52794Creative Contact Form <= 1.0.0 - Cross-Site Request Forgery
Read the full analysisVulnerability Records
Creative Contact Form
Author
Creative-Solutions
Creative Contact Form – You will be surprised by count of all the possible features! It is packed with a Template Creator wizard to create fanstastic contact forms in a matter of seconds without coding. Popular form types: Contact Form, Feedback Form, Application Forms, Surveys, Reservation Form, Contact data page. Useful Links: Homepage Live Demo Template Creator Demo Support Forum Main Fetures: All texts are fully customizable. You can controll them throgh wp-admin. No need to modify text files! Template-Creator wizard – It is packed with a template-creator wizard to create fantastic forms in a matter of seconds without coding.(PRO version).See Demo Flexible field types: name, email, phone, address, url, number, textarea, select, multiple select, checkbox, radio. Captcha, File Upload – PRO version. Completely new checkbox, radio selection effect, implemented special for Creative Contsat Form! Load countries list (239 countries). Flexible and user friendly interface for inputting checkbox,radio/select options. Set pre-checked/selected options for checkbox,radio/select types. Multiple email recipients, BCC, reply to email, from email Ajax based. no page reload! Allows page redirect to URL or menu item after sending email! Set all fields as required or not! Automatically fill in User name and email if logged in. Send copy to sender! High level Spam protection! Drag&Drop reordering for fields, and forms in administration! Custom email subject! Shake effect if field is not valid. 6 beautiful skins. See demo Very easy to install and configure! PRO features: Template Creator Wizard! Flexible File Upload: Multiple file selection, drag&drop support, costum file types support, customizable validation messages, upload max&min size, etc… Captcha support! Unlimited forms (1 in free version)! Unlimited fields (3 in free version)! Multiple forms on same page! No Powered By text! PRO support! Other Creative Plugins: Creative Image Slider – Powerful WordPress slider! Live Demo GSpeech – Speaks any text in your site! Live Demo IMPORTANT: If you think you found a bug in Creative Contact Form or have any problem or question concerning it, do not hesitate to contact us at info@creative-solutions.net. Support: Please use Support Forum for your questions and support requests!
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C