CVE-2008-0198

CVE-2008-0198 describes multiple Cross-Site Request Forgery (CSRF) vulnerabilities in the WP-ContactForm plugin (versions 1.5 alpha and earlier) for WordPress. An attacker could exploit these flaws by tricking an authenticated administrator into clicking a malicious link, leading to unauthorized modification of plugin settings such as the question, success message, or error message. The vulnerability has a CVSS score of 4.3, indicating medium attack complexity and low impact (partial integrity loss), with no authentication required. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.