plugin
2 known security issues reported for the Easy Contact Form Pro WordPress plugin. Most recent disclosed Apr 5, 2021.
Running Easy Contact Form Pro on your site? Check whether your installed version is affected.
Scan your site free[en] The Easy Contact Form Pro WordPress plugin before 1.1.1.9 did not properly sanitise the text fields (such as Email Subject, Email Recipient, etc) when creating or editing a form, leading to an authenticated (author+) stored cross-site scripting issue. This could allow medium privilege accounts (such as author and...
The Easy Contact Form Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting did not properly sanitise the text fields (such as Email Subject, Email Recipient, etc) when creating or editing a form in versions before 1.1.1.9. This makes it possible for Author-level attackers to inject arbitrary web script...
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free