VYPR

Super Simple Contact Form

by WordPress

Source repositories

CVEs (1)

  • CVE-2026-0753HigFeb 14, 2026
    risk 0.47cvss 7.2epss 0.00

    The Super Simple Contact Form plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'sscf_name' parameter in all versions up to, and including, 1.6.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated…