Skip to content

Supsysticcom vulnerabilities

Products

Newest

supsysticcom contact form by supsystic Contact Form by Supsystic < 1.11.1 - Unauthenticated CRLF / Email Header Injection via Reply-To Field Mapping CVE-2026-115303 3.7 LowOctober 29, 2026
supsysticcom contact form by supsystic Contact Form by Supsystic < 1.11.1 - Unauthenticated Arbitrary Statistics Deletion CVE-2026-115302 5.3 MediumOctober 29, 2026
supsysticcom contact form by supsystic Contact Form by Supsystic < 1.11.1 - Admin+ SSTI via Form Text Block CVE-2026-115301 7.2 HighOctober 29, 2026
supsysticcom contact form by supsystic Contact Form by Supsystic < 1.11.1 - Contact Submission and Statistics Deletion via CSRF CVE-2026-115300 4.3 MediumOctober 29, 2026
supsysticcom contact form by supsystic Contact Form by Supsystic < 1.11.1 - Arbitrary Plugin Settings Update via CSRF CVE-2026-115299 5.4 MediumOctober 29, 2026
supsystic contact form by supsystic WordPress Contact Form by Supsystic plugin <= 1.10.5 - Sensitive Data Exposure vulnerability CVE-2026-115591 7.5 HighOctober 28, 2026
supsysticcom smart popup by supsystic Smart Popup by Supsystic < 2.0.2 - Admin+ SSTI via Popup Text Block CVE-2026-115223 4.9 MediumOctober 28, 2026
supsystic contact form by supsystic WordPress Contact Form by Supsystic plugin <= 1.10.7 - Broken Access Control vulnerability CVE-2026-115595 5.3 MediumOctober 26, 2026
supsysticcom contact form by supsystic Contact Form by Supsystic < 1.8.0 - Admin+ Stored XSS CVE-2025-15705 3.5 LowOctober 25, 2026
supsysticcom data tables generator by supsystic Data Tables Generator by Supsystic <= 1.12.03 - Authenticated (Contributor+) Stored Cross-Site Scripting via Table 'id' HTML Attribute CVE-2026-14877 6.4 MediumOctober 10, 2026
supsysticcom smart popup by supsystic Smart Popup by Supsystic <= 1.13.2 - Authenticated (Administrator+) SQL Injection via 'sidx' Parameter CVE-2026-104023 4.9 MediumOctober 10, 2026
supsysticcom data tables generator by supsystic Data Tables Generator by Supsystic <= 1.15.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Table Cell 'data' Value via updateRows Action CVE-2026-96648 6.4 MediumOctober 10, 2026
supsysticcom contact form by supsystic Contact Form by Supsystic <= 1.10.2 - Unauthenticated Stored Cross-Site Scripting via IP Address Header CVE-2026-83625 7.2 HighSeptember 5, 2026
supsystic contact form by supsystic WordPress Contact Form by Supsystic plugin < 1.10.0 - Bypass Vulnerability vulnerability CVE-2026-73379 6.5 MediumAugust 18, 2026
supsystic contact form by supsystic WordPress Contact Form by Supsystic plugin < 1.10.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-73378 7.1 HighAugust 18, 2026
supsysticcom smart popup by supsystic Smart Popup by Supsystic <= 1.12.0 - Unauthenticated Privilege Escalation to Administrator CVE-2026-18322 Public exploit 8.8 HighAugust 5, 2026
supsysticcom contact form by supsystic Contact Form by Supsystic <= 1.7.36 - Unauthenticated Server-Side Template Injection via Prefill Functionality CVE-2026-4257 Public exploit EPSS 41.5% 9.8 CriticalMarch 30, 2026
supsysticcom data tables generator by supsystic Data Tables Generator by Supsystic <= 1.10.45 - Authenticated (Admin+) Arbitrary File Deletion CVE-2025-12089 6.5 MediumNovember 13, 2025
supsystic contact form by supsystic WordPress Contact Form by Supsystic plugin <= 1.7.36 - Cross Site Scripting (XSS) vulnerability CVE-2025-52753 7.1 HighOctober 22, 2025
supsysticcom contact form by supsystic Contact Form by Supsystic <= 1.7.29 - Cross-Site Request Forgery to Stored Cross-Site Scripting via saveAsCopy AJAX Action CVE-2024-13452 6.1 MediumApril 16, 2025
supsystic data tables generator by supsystic WordPress Data Tables Generator by Supsystic plugin <= 1.10.36 - Broken Access Control vulnerability CVE-2024-56253 5.4 MediumJanuary 2, 2025
supsystic contact form by supsystic WordPress Contact Form by Supsystic plugin <= 1.7.28 - Cross Site Scripting (XSS) vulnerability CVE-2024-48046 5.9 MediumOctober 17, 2024
supsystic contact form by supsystic, contact form +1 more WordPress Contact Form by Supsystic plugin <= 1.7.28 - Remote Code Execution (RCE) vulnerability CVE-2024-48042 9.1 CriticalOctober 16, 2024
supsystic easy google maps Easy Google Maps <= 1.11.15 - Authenticated (Author+) Stored Cross-Site Scripting CVE-2024-5219 6.4 MediumJuly 2, 2024
supsystic data tables generator by supsystic WordPress Data Tables Generator by Supsystic plugin <= 1.10.31 - Broken Access Control vulnerability CVE-2024-32829 4.3 MediumApril 26, 2024
supsystic digital publications by supsystic, supsysticcom wordpress flipbook by supsystic +1 more Digital Publications by Supsystic <= 1.7.6 - Cross-Site Request Forgery via AJAX action CVE-2023-5756 5.4 MediumDecember 9, 2023
supsystic contact form by supsystic, contact form +1 more WordPress Contact Form by Supsystic Plugin <= 1.7.27 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-45068 5.4 MediumOctober 12, 2023
supsystic easy google maps Easy Google Maps <= 1.11.7 - Cross-Site Request Forgery via AJAX action CVE-2023-2526 5.4 MediumJune 9, 2023
supsystic contact form, supsysticcom contact form by supsystic +1 more Contact Form by Supsystic <= 1.7.24 - Cross-Site Request Forgery via AJAX action CVE-2023-2528 5.4 MediumMay 16, 2023
supsystic data tables generator, supsysticcom data tables generator by supsystic +1 more Data Tables Generator by Supsystic < 1.10.20 - Admin+ Stored Cross-Site Scripting CVE-2022-2114 4.8 MediumJuly 17, 2022
supsystic contact form by supsystic, contact form +1 more Contact Form by Supsystic < 1.7.15 - Reflected Cross-Site scripting (XSS) CVE-2021-24276 Public exploit EPSS 16.0% 6.1 MediumMay 5, 2021