Threat Entry Updated 2025-05-28

CVE-2024-5809 - Wp Ajax Contact Form Plugin

The WP Ajax Contact Form WordPress plugin through 2.2.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against admin users

PLUGIN Wp Ajax Contact Form

CVE-2024-5809

MEDIUM CVSS 6.1 2024-07-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2025-05-28

CVE-2024-5808 - Wp Ajax Contact Form Plugin

The WP Ajax Contact Form WordPress plugin through 2.2.2 does not have CSRF check in place when deleting emails from the email list, which could allow attackers to make a logged in admin perform such action via a CSRF attack

PLUGIN Wp Ajax Contact Form

CVE-2024-5808

MEDIUM CVSS 4.3 2024-07-30

Risk Score

Open Full Technical Breakdown