CVE

CVE-2017-18492

6.1

CVSS

Description

The contact-form-to-db plugin before 1.5.7 for WordPress has multiple XSS issues.

Attack Vector

Privileges Req.

User Interaction

Updated Sep 23, 2026View on NVD →

S4E scanner

CVE-2017-18492 Scanner

CVE-2017-18492 scanner - Cross-Site Scripting (XSS) vulnerability in Contact Form plugin for WordPress

Used 3.2k times · 2 assets checked · domain, ipv4, subdomain

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.