CP Contact Form with PayPal vulnerabilities

2 known vulnerabilities in CP Contact Form with PayPal from CodePeople. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.5 High severity

  CP Contact Form with Paypal: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-32433Mar 13, 2026CodePeople

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in codepeople CP Contact Form with Paypal cp-contact-form-with-paypal allows Blind SQL Injection.This issue affects CP Contact Form with Paypal: from n/a through

• 7.5 High severity

  CP Contact Form with PayPal: Missing Authorization

  CVE-2025-13384Nov 22, 2025CodePeople

  The CP Contact Form with PayPal plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.3.56. This is due to the plugin exposing an unauthenticated IPN-like endpoint (via the 'cp_contactformpp_ipncheck' query paramet