CVE-2019-9646

概要

参考情報

• lists.openwall.net/full-disclosure/2019/02/05/7 · Exploit
• security-consulting.icu/blog/2019/02/wordpress-contact-form-email-xss-csrf · Exploit
• wordpress.org/plugins/contact-form-to-email · Third Party Advisory

contact form email のその他の脆弱性

• CVE-2025-24727中 4.8Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople Contact Form Email contact-…
• CVE-2023-48318中 6.5Improper Restriction of Excessive Authentication Attempts vulnerability in CodePeople Contact Form Email allows Functionality Bypass.This is…
• CVE-2023-28494中 4.3Missing Authorization vulnerability in CodePeople Contact Form Email allows Functionality Misuse.This issue affects Contact Form Email: from…
• CVE-2024-31302中 5.3Exposure of Sensitive Information to an Unauthorized Actor vulnerability in CodePeople Contact Form Email.This issue affects Contact Form Em…
• CVE-2023-5955中 4.8The Contact Form Email WordPress plugin before 1.3.44 does not sanitise and escape some of its settings, which could allow high privilege us…