The Simple Basic Contact Form plugin for WordPress for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 20240502. This allows unauthenticated attackers to execute arbitrary shortcodes. The severity and exploitability depends on the functionality of other plugins installed in the environment.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Simple Basic Contact Form Plugin | — | Update simple-basic-contact-form plugin to version 20240511, or a newer patched version | May 15, 2025 | May 13, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub