How many codepeople Contact Form Email CVEs are in CISA KEV?

None of codepeople Contact Form Email's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of codepeople Contact Form Email are affected?

31 distinct codepeople Contact Form Email versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in codepeople Contact Form Email CVEs?

codepeople Contact Form Email's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-862 (Missing Authorization), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-307 (Improper Restriction of Excessive Authentication Attempts).

What is the average severity of codepeople Contact Form Email CVEs?

The average CVSS base score across codepeople Contact Form Email's scored CVEs is 6.1.

RadicalNotion.AI

Log in Create an account

codepeople

13 CVEs

codepeople Contact Form Email Vulnerabilities

Name: codepeople Contact Form Email vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Contact Form Email by codepeople.

13

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

3

Public exploits

PoC or exploit code

6.1

Avg CVSS

2019–2026

Last updated March 25, 2026

Overview

codepeople Contact Form Email has 13 published CVE records since 2019, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 6.1.

Severity and exploitation

How the CVSS severity of codepeople Contact Form Email's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High1

Medium12

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of codepeople Contact Form Email's CVEs are currently listed in CISA's KEV catalog.

Public exploits

3

3 of codepeople Contact Form Email's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every codepeople Contact Form Email version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.2.663 CVEs
< 1.3.442 CVEs
< 1.3.321 CVE
< 1.3.381 CVE
< 1.3.421 CVE
< 1.3.531 CVE
<= 1.3.241 CVE
<= 1.3.311 CVE
<= 1.3.411 CVE
<= 1.3.441 CVE
<= 1.3.521 CVE
<= 1.3.581 CVE
<= 1.3.601 CVE
<= 1.3.631 CVE
>= 1.3.321 CVE
>= 1.3.421 CVE
>= 1.3.451 CVE
>= 1.3.531 CVE
>= 1.3.591 CVE
>= 1.3.611 CVE
>= 1.3.641 CVE

Fixed in

1.2.663 CVEs
1.3.442 CVEs
1.3.321 CVE
1.3.381 CVE
1.3.421 CVE
1.3.451 CVE
1.3.531 CVE
1.3.591 CVE
1.3.611 CVE
1.3.641 CVE

Find a version

13 CVEs

Sort

WordPress Contact Form Email plugin <= 1.3.63 - Broken Access Control vulnerability
CVE-2026-32483
Patch
CWE-862
Medium · CVSS 6.5
EPSS 0.3% (24th pct)2026-03-25
WordPress Contact Form Email plugin <= 1.3.60 - Insecure Direct Object References (IDOR) vulnerability
CVE-2025-10019
Patch
CWE-639
Medium · CVSS 6.5
EPSS 0.4% (36th pct)2025-12-18
WordPress Contact Form Email plugin <= 1.3.58 - Broken Access Control vulnerability
CVE-2025-64369
Patch
CWE-862
Medium · CVSS 6.5
EPSS 0.2% (15th pct)2025-11-13
WordPress Contact Form to Email Plugin <= 1.3.52 - Cross Site Scripting (XSS) vulnerability
CVE-2025-24727
Patch
CWE-79
Medium · CVSS 5.9
EPSS 0.3% (23th pct)2025-01-24
WordPress Contact Form Email plugin <= 1.3.41 - Captcha Bypass vulnerability
CVE-2023-48318
Patch
CWE-307
Medium · CVSS 6.5
EPSS 0.3% (22th pct)2024-06-04
WordPress Contact Form Email plugin <= 1.3.31 - Missing Authorization Leading To Feedback Submission Vulnerability
CVE-2023-28494
Patch
CWE-862
Medium · CVSS 4.3
EPSS 0.3% (23th pct)2024-06-04
WordPress Contact Form Email plugin <= 1.3.44 - Sensitive Data Exposure vulnerability
CVE-2024-31302
Patch
CWE-200
Medium · CVSS 5.3
EPSS 0.5% (39th pct)2024-04-10
Medium vulnerability · 2023-12-11
CVE-2023-5955
Public exploit
Patch
CWE-79
Medium · CVSS 6.1
EPSS 0.5% (38th pct)2023-12-11
Medium vulnerability · 2023-06-12
CVE-2023-2718
Public exploit
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.5% (42th pct)2023-06-12
Medium vulnerability · 2021-11-17
CVE-2021-42361
Patch
CWE-79
Medium · CVSS 4.8
EPSS 0.6% (49th pct)2021-11-17
Medium vulnerability · 2019-08-13
CVE-2018-20963
Patch
CWE-79
Medium · CVSS 6.1
EPSS 0.9% (59th pct)2019-08-13
High vulnerability · 2019-08-13
CVE-2018-20964
Patch
CWE-352
High · CVSS 8.8
EPSS 0.7% (51th pct)2019-08-13
Medium vulnerability · 2019-03-10
CVE-2019-9646
Public exploit
Patch
CWE-79
Medium · CVSS 6.1
EPSS 1.4% (72th pct)2019-03-10

Common weakness types

The CWE weakness categories most often found in codepeople Contact Form Email CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many codepeople Contact Form Email CVEs were published each year.

2019

3

2021

1

2023

2

2024

3

2025

3

2026

1

Other codepeople products

Browse vulnerabilities for other products by codepeople.

Calculated Fields Form17 CVEs appointment booking calendar15 CVEs Booking Calendar Contact Form12 CVEs WP Time Slots Booking Form12 CVEs cp contact form with paypal7 CVEs polls cp7 CVEs Appointment Hour Booking – Booking Calendar5 CVEs CP Multi View Event Calendar5 CVEs

All codepeople vulnerabilities

Frequently asked questions

Common questions about codepeople Contact Form Email vulnerabilities.

How many CVEs does codepeople Contact Form Email have?: codepeople Contact Form Email has 13 published CVE records since 2019.
How many codepeople Contact Form Email CVEs are in CISA KEV?: None of codepeople Contact Form Email's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for codepeople Contact Form Email vulnerabilities?: Yes — 3 of codepeople Contact Form Email's CVEs have a known public exploit.
Which versions of codepeople Contact Form Email are affected?: 31 distinct codepeople Contact Form Email versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in codepeople Contact Form Email CVEs?: codepeople Contact Form Email's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-862 (Missing Authorization), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-307 (Improper Restriction of Excessive Authentication Attempts).
What is the average severity of codepeople Contact Form Email CVEs?: The average CVSS base score across codepeople Contact Form Email's scored CVEs is 6.1.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track codepeople Contact Form Email vulnerabilities

Get an alert for each new codepeople Contact Form Email CVE, with AI-written analysis and remediation steps.

Create an account See pricing