CVE Catalog
CVE-2026-73379
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.21%
12th percentile - higher than 12% of all known CVEs
Summary
The Contact Form by Supsystic plugin version earlier than 1.10.0 has a bypass vulnerability that does not require authentication. This means an unauthenticated attacker can bypass security mechanisms and gain unauthorized access.
Risk Assessment
The risk is that an attacker can bypass security and access functions or data, potentially leading to confidentiality and integrity breaches.
Recommendation
It is recommended to update the plugin to version 1.10.0 or later, which includes a fix for this vulnerability.
Original NVD description (English source)
Unauthenticated Bypass Vulnerability in Contact Form by Supsystic < 1.10.0 versions.

