Contact Form to Any API vulnerabilities
We track 1 vulnerability in Contact Form to Any API products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 10, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Contact Form to Any API vulnerabilities
- 7.5 High severity
Contact Form to Any API: Exposure of Sensitive Information to an Unauthorized Actor
The Contact Form to Any API WordPress plugin before 3.0.7 does not use a random filename when copying files uploaded through contact forms into a publicly accessible directory, allowing unauthenticated attackers to enumerate and download files submitted by oth