plugin

Wp Quick Contact Us Vulnerabilities

1 known security issue reported for the Wp Quick Contact Us WordPress plugin. Most recent disclosed Feb 13, 2026.

1 medium

Running Wp Quick Contact Us on your site? Check whether your installed version is affected.

WP Quick Contact Us <= 1.0 - Cross-Site Request Forgery to Settings Update

medium

The WP Quick Contact Us plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to update the plugin's settings via a forged request gran...

CVSS:: 4.3
Affected:: up to 1.0
Fix:: No patched version reported
Disclosed:: Feb 13, 2026

CVE-2026-1394 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database