CVE-2024-13452: Improper Neutralization of Input During Web Page Generation

The Contact Form by Supsystic plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.29. This is due to missing or incorrect nonce validation on a saveAsCopy function. This makes it possible for unauthenticated attackers to update settings and...

PT-2025-16548

Name of the Vulnerable Software and Affected Versions Contact Form by Supsystic plugin for WordPress versions up to and including 1.7.29 Description The issue is due to missing or incorrect nonce validation on the saveAsCopy function, making it possible for unauthenticated attackers to update...