CVE-2025-8315

🗓️ 05 Aug 2025 06:39:48Reported by WordfenceType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 13 Views

WP Easy Contact plugin allows Stored Cross-Site Scripting via noaccess_msg for versions up to 4.0.1

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2025-8315	5 Aug 202511:13	–	circl
CNNVD	WordPress plugin WP Easy Contact 跨站脚本漏洞	5 Aug 202500:00	–	cnnvd
CNVD	WordPress WP Easy Contact plugin cross-site scripting vulnerability	11 Aug 202500:00	–	cnvd
Cvelist	CVE-2025-8315 WP Easy Contact <= 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameter	5 Aug 202506:39	–	cvelist
EUVD	EUVD-2025-23611	3 Oct 202520:07	–	euvd
NVD	CVE-2025-8315	5 Aug 202507:15	–	nvd
Patchstack	WordPress WP Easy Contact plugin <= 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameter vulnerability	4 Aug 202521:53	–	patchstack
Positive Technologies	PT-2025-31909 · WordPress · Wp Easy Contact	5 Aug 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-8315	7 Aug 202507:31	–	redhatcve
Vulnrichment	CVE-2025-8315 WP Easy Contact <= 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameter	5 Aug 202506:39	–	vulnrichment

Vulners

Node

emarket-design simple_contact_form_plugin_for_wordpress_wp_easy_contactRange≤4.0.1wordpress

[
  {
    "vendor": "emarket-design",
    "product": "Simple Contact Form Plugin for WordPress – WP Easy Contact",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "4.0.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordpress	www.wordpress.org/plugins/wp-easy-contact/
plugins	www.plugins.svn.wordpress.org/wp-easy-contact/tags/4.0.1/includes/emd-form-builder-lite/emd-form-frontend.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/229c88ea-c091-43b6-ac4d-31bccdd13a07
plugins	www.plugins.trac.wordpress.org/changeset/3337661

15 Apr 2026 00:35Current

5.6Medium risk

Vulners AI Score5.6

CVSS 3.16.4

EPSS0.00203

SSVC

CWE-79