How many Supsystic Contact Form by Supsystic CVEs are in CISA KEV?

None of Supsystic Contact Form by Supsystic's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Supsystic Contact Form by Supsystic are affected?

15 distinct Supsystic Contact Form by Supsystic versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Supsystic Contact Form by Supsystic CVEs?

Supsystic Contact Form by Supsystic's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-288 (Authentication Bypass Using an Alternate Path or Channel), CWE-82 (Improper Neutralization of Script in Attributes of IMG Tags in a Web Page).

How many critical Supsystic Contact Form by Supsystic vulnerabilities are there?

Supsystic Contact Form by Supsystic has 2 critical and 5 high-severity CVEs.

What is the average severity of Supsystic Contact Form by Supsystic CVEs?

The average CVSS base score across Supsystic Contact Form by Supsystic's scored CVEs is 7.5.

RadicalNotion.AI

Log in Create an account

Supsystic

11 CVEs

Supsystic Contact Form by Supsystic Vulnerabilities

Name: Supsystic Contact Form by Supsystic vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Contact Form by Supsystic by Supsystic.

11

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

2

Public exploits

PoC or exploit code

7.5

Avg CVSS

2021–2026

Last updated September 5, 2026

Overview

Supsystic Contact Form by Supsystic has 11 published CVE records since 2021, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 7.5.

Severity and exploitation

How the CVSS severity of Supsystic Contact Form by Supsystic's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High5

Medium4

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Supsystic Contact Form by Supsystic's CVEs are currently listed in CISA's KEV catalog.

Public exploits

2

2 of Supsystic Contact Form by Supsystic's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Supsystic Contact Form by Supsystic version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.10.02 CVEs
<= 1.7.282 CVEs
<= 1.7.362 CVEs
>= 1.10.02 CVEs
>= 1.7.292 CVEs
<= 1.10.21 CVE
<= 1.7.241 CVE
<= 1.7.271 CVE
<= 1.7.291 CVE
>= 1.8.01 CVE
1.7.15 <= v < 1.7.151 CVE

Fixed in

1.10.02 CVEs
1.7.292 CVEs
1.7.151 CVE
1.8.01 CVE

Find a version

11 CVEs

Sort

Contact Form by Supsystic <= 1.10.2 - Unauthenticated Stored Cross-Site Scripting via IP Address Header
CVE-2026-83625CWE-79
High · CVSS 7.2
EPSS 0.6% (47th pct)2026-09-05
WordPress Contact Form by Supsystic plugin < 1.10.0 - Bypass Vulnerability vulnerability
CVE-2026-73379
Patch
CWE-288
Medium · CVSS 6.5
EPSS 0.3% (20th pct)2026-08-18
WordPress Contact Form by Supsystic plugin < 1.10.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-73378
Patch
CWE-79
High · CVSS 7.1
EPSS 0.3% (15th pct)2026-08-18
Contact Form by Supsystic <= 1.7.36 - Unauthenticated Server-Side Template Injection via Prefill Functionality
CVE-2026-4257
Public exploit
CWE-94
Critical · CVSS 9.8
EPSS 32.8% (98th pct)2026-03-30
WordPress Contact Form by Supsystic plugin <= 1.7.36 - Cross Site Scripting (XSS) vulnerability
CVE-2025-52753
Patch
CWE-79
High · CVSS 7.1
EPSS 0.3% (15th pct)2025-10-22
Contact Form by Supsystic <= 1.7.29 - Cross-Site Request Forgery to Stored Cross-Site Scripting via saveAsCopy AJAX Action
CVE-2024-13452CWE-79
Medium · CVSS 6.1
EPSS 0.3% (23th pct)2025-04-16
WordPress Contact Form by Supsystic plugin <= 1.7.28 - Cross Site Scripting (XSS) vulnerability
CVE-2024-48046
Patch
CWE-79
Medium · CVSS 5.9
EPSS 0.3% (19th pct)2024-10-17
WordPress Contact Form by Supsystic plugin <= 1.7.28 - Remote Code Execution (RCE) vulnerability
CVE-2024-48042
Patch
CWE-82
Critical · CVSS 9.1
EPSS 1.1% (66th pct)2024-10-16
WordPress Contact Form by Supsystic Plugin <= 1.7.27 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-45068CWE-352
High · CVSS 8.8
EPSS 0.2% (15th pct)2023-10-12
Contact Form by Supsystic <= 1.7.24 - Cross-Site Request Forgery via AJAX action
CVE-2023-2528CWE-352
High · CVSS 8.8
EPSS 0.3% (23th pct)2023-05-16
Medium vulnerability · 2021-05-05
CVE-2021-24276
Public exploit
Patch
CWE-79
Medium · CVSS 6.1
EPSS 16.0% (97th pct)2021-05-05

Common weakness types

The CWE weakness categories most often found in Supsystic Contact Form by Supsystic CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Supsystic Contact Form by Supsystic CVEs were published each year.

2021

1

2023

2

2024

2

2025

2

2026

4

Other Supsystic products

Browse vulnerabilities for other products by Supsystic.

Easy Google Maps10 CVEs popup10 CVEs Popup by Supsystic10 CVEs Ultimate Maps by Supsystic8 CVEs Data Tables Generator by Supsystic5 CVEs Digital Publications by Supsystic5 CVEs social share buttons5 CVEs contact form4 CVEs

All Supsystic vulnerabilities

Frequently asked questions

Common questions about Supsystic Contact Form by Supsystic vulnerabilities.

How many CVEs does Supsystic Contact Form by Supsystic have?: Supsystic Contact Form by Supsystic has 11 published CVE records since 2021.
How many Supsystic Contact Form by Supsystic CVEs are in CISA KEV?: None of Supsystic Contact Form by Supsystic's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Supsystic Contact Form by Supsystic vulnerabilities?: Yes — 2 of Supsystic Contact Form by Supsystic's CVEs have a known public exploit.
Which versions of Supsystic Contact Form by Supsystic are affected?: 15 distinct Supsystic Contact Form by Supsystic versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Supsystic Contact Form by Supsystic CVEs?: Supsystic Contact Form by Supsystic's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-288 (Authentication Bypass Using an Alternate Path or Channel), CWE-82 (Improper Neutralization of Script in Attributes of IMG Tags in a Web Page).
How many critical Supsystic Contact Form by Supsystic vulnerabilities are there?: Supsystic Contact Form by Supsystic has 2 critical and 5 high-severity CVEs.
What is the average severity of Supsystic Contact Form by Supsystic CVEs?: The average CVSS base score across Supsystic Contact Form by Supsystic's scored CVEs is 7.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Supsystic Contact Form by Supsystic vulnerabilities

Get an alert for each new Supsystic Contact Form by Supsystic CVE, with AI-written analysis and remediation steps.

Create an account See pricing