CVE Catalog

CVE-2026-73379

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.21%

12th percentile - higher than 12% of all known CVEs

Summary

The Contact Form by Supsystic plugin version earlier than 1.10.0 has a bypass vulnerability that does not require authentication. This means an unauthenticated attacker can bypass security mechanisms and gain unauthorized access.

Risk Assessment

The risk is that an attacker can bypass security and access functions or data, potentially leading to confidentiality and integrity breaches.

Recommendation

It is recommended to update the plugin to version 1.10.0 or later, which includes a fix for this vulnerability.

Original NVD description (English source)

Unauthenticated Bypass Vulnerability in Contact Form by Supsystic < 1.10.0 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS