Cimatti's vulnerability profile centers on WordPress contact-form plugins, niche components widely deployed across small and medium-sized websites. The recurring exposure reflects the plugin's web-facing input-handling and form-processing role, with durable weakness classes including cross-site scripting, cross-site request forgery, and missing authorization controls. Current severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Cimatti over time
Signals from CVEs in this vendor scope (10 CVEs).
10 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-35051HIGH Missing Authorization vulnerability in Cimatti Consulting Contact Forms by Cimatti allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contac | Dec 13, 2024 | 8.8 | 25 | NO | NO |
CVE-2023-47230HIGH Cross-Site Request Forgery (CSRF) vulnerability in Cimatti Consulting WordPress Contact Forms by Cimatti plugin <= 1.6.0 versions. | Nov 13, 2023 | 8.8 | 24 | NO | NO |
CVE-2024-29117MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cimatti Consulting Contact Forms by Cimatti allows Stored XSS.This issue affec | Mar 19, 2024 | 6.1 | 20 | NO | NO |
CVE-2023-28789MEDIUM Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Cimatti Consulting WordPress Contact Forms by Cimatti plugin <= 1.5.4 versions. | Apr 7, 2023 | 6.1 | 20 | NO | NO |
CVE-2023-28781MEDIUM Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Cimatti Consulting WordPress Contact Forms by Cimatti plugin <= 1.5.4 versions. | Apr 7, 2023 | 6.1 | 20 | NO | NO |
CVE-2021-24744MEDIUM The WordPress Contact Forms by Cimatti WordPress plugin before 1.4.12 does not sanitise and escape the Form Title before outputting it in some admin pages. which could allow high p | Oct 25, 2021 | 4.8 | 18 | NO | NO |
CVE-2024-12184MEDIUM The WordPress Contact Forms by Cimatti plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the accua_forms_download_submitted_fil | Feb 1, 2025 | 5.3 | 17 | NO | NO |
CVE-2024-30549MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cimatti Contact Forms by Cimatti contact-forms.This issue affects Contact Form | Mar 31, 2024 | 4.8 | 16 | NO | NO |
CVE-2023-2563MEDIUM The WordPress Contact Forms by Cimatti plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.7. This is due to missing or incorrect | Jun 13, 2023 | 4.3 | 16 | NO | NO |
CVE-2024-10521MEDIUM The WordPress Contact Forms by Cimatti plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.9.2. This is due to missing or incor | Nov 27, 2024 | 4.3 | 15 | NO | NO |
Signals from CVEs in this vendor scope (10 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Cimatti.
Media articles that mention a CVE ID that affects a product developed by Cimatti — matched by CVE ID, not by vendor name.