Simple Basic Contact Form

Simple Basic Contact Form has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; 4 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 5.9, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2024 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 4 of the records (80%). Other recurring categories include Code Injection.

4 of the records (80%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2026.

5 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

5.9/ 10

Patch Coverage80%

Open

Fixed

Get automatic notifications for all Simple Basic Contact Form vulnerabilities before they are exploited.

Most severe open issueCVSS 7.2CVE-2026-8172

Simple Basic Contact Form <= 20250114 - Unauthenticated Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

5 records


2026-06-25 00:00	Simple Basic Contact Form <= 20250114 - Unauthenticated Stored Cross-Site Scripting Simple Basic Contact Form <= 20250114	`CVE-2026-8172`	7.2 High	Juthawong Naisanguansee	No
2025-03-03 00:00	Simple Basic Contact Form <= 20240511 - Authenticated (Admin+) Stored Cross-Site Scripting Simple Basic Contact Form <= 20240511	`CVE-2024-12716`	4.4 Medium	Krugov Artyom	Yes
2024-05-13 00:00	Simple Basic Contact Form <= 20240502 - Unauthenticated Arbitrary Shortcode Execution Simple Basic Contact Form <= 20240502	`CVE-2024-4144`	6.5 Medium	stealthcopter	Yes
2024-05-03 00:00	Simple Basic Contact Form <= 20221201 - Reflected Cross-Site Scripting Simple Basic Contact Form <= 20221201	`CVE-2024-4150`	6.1 Medium	Krzysztof Zając	Yes
2022-12-02 00:00	Simple Basic Contact Form <= 20220207 - Authenticated (Administrator+) Stored Cross-Site Scripting Simple Basic Contact Form <= 20220207	`CVE-2022-4226`	5.5 Medium	zhangyunpei	Yes

Showing 1–5 of 5 reports