CVE-2024-4144

🗓️ 14 May 2024 05:33:00Reported by WordfenceType

Vulnerability in Simple Basic Contact Form plugin for WordPress 20240502

Reporter	Title	Published	Views	Family All 10
CNNVD	WordPress plugin Simple Basic Contact Form 安全漏洞	14 May 202400:00	–	cnnvd
Cvelist	CVE-2024-4144 Simple Basic Contact Form <= 20240502 - Unauthenticated Arbitrary Shortcode Execution	14 May 202405:33	–	cvelist
EUVD	EUVD-2024-32704	3 Oct 202520:07	–	euvd
NVD	CVE-2024-4144	14 May 202416:17	–	nvd
Patchstack	WordPress Simple Basic Contact Form Plugin <= 20240502 is vulnerable to Broken Access Control	14 May 202400:00	–	patchstack
Patchstack	WordPress Simple Basic Contact Form plugin <= 20240502 - Unauthenticated Arbitrary Shortcode Execution vulnerability	14 May 202401:29	–	patchstack
RedhatCVE	CVE-2024-4144	23 May 202508:43	–	redhatcve
Vulnrichment	CVE-2024-4144 Simple Basic Contact Form <= 20240502 - Unauthenticated Arbitrary Shortcode Execution	14 May 202405:33	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (May 13, 2024 to May 19, 2024)	23 May 202415:00	–	wordfence
WPVulnDB	Simple Basic Contact Form < 20240511 - Unauthenticated Arbitrary Shortcode Execution	13 May 202400:00	–	wpvulndb

Vulners

Vulnrichment

Node

wpkube simple_basic_contact_formRange≤20240502wordpress

[
  {
    "vendor": "wpkube",
    "product": "Simple Basic Contact Form",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "20240502",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/simple-basic-contact-form/trunk/simple-basic-contact-form.php
plugins	www.plugins.trac.wordpress.org/changeset/3085036/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/ded1944f-662d-4d25-8277-4b1dc63b2144

15 Apr 2026 00:35Current

9.6High risk

Vulners AI Score9.6

CVSS 3.16.5

EPSS0.01719

SSVC

CWE-94