Supsysticcom vulnerabilities
We track 5 vulnerabilities in Supsysticcom products across 3 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on September 5, 2026.
Latest Supsysticcom vulnerabilities
- 7.2 High severity
Contact Form by Supsystic: Improper Neutralization of Input During Web Page Generation
The Contact Form by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via IP Address Header in all versions up to, and including, 1.10.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenti
- 8.8 High severity
Smart Popup by Supsystic: Improper Privilege Management
The Smart Popup by Supsystic plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.12.0. This is due to a permission map collision in the `havePermissions()` function in `classes/frame.php`, where `array_merge()` ov
- 9.8 Critical severity
Contact Form by Supsystic: Improper Control of Generation of Code
The Contact Form by Supsystic plugin for WordPress is vulnerable to Server-Side Template Injection (SSTI) leading to Remote Code Execution (RCE) in all versions up to, and including, 1.7.36. This is due to the plugin using the Twig `Twig_Loader_String` templat
- 8.8 High severity
WordPress Flipbook by Supsystic: Cross-Site Request Forgery
The Digital Publications by Supsystic plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.6. This is due to missing or incorrect nonce validation on the AJAX action handler. This makes it possible for unauthen
- 8.8 High severity
Contact Form by Supsystic: Cross-Site Request Forgery
The Contact Form by Supsystic plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.24. This is due to missing or incorrect nonce validation on the AJAX action handler. This makes it possible for unauthenticated