Creative Solutions maintains a small portfolio of web-based form and gallery plugins, including its contact form generator and gallery products, that serve primarily as content-management add-ons rather than core infrastructure. The observed vulnerability exposure clusters around these customer-facing utilities and their interaction with form handling and data presentation logic. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Creative Solutions over time
Signals from CVEs in this vendor scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2014-8739CRITICAL Unrestricted file upload vulnerability in server/php/UploadHandler.php in the jQuery File Upload Plugin 6.4.4 for jQuery, as used in the Creative Solutions Creative Contact Form (f | Feb 8, 2020 | 9.8 | 91 | NO | YES |
CVE-2023-35911CRITICAL Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Creative Solutions Contact Form Generator : Creative form builder for WordPres | Nov 6, 2023 | 9.8 | 30 | NO | NO |
CVE-2023-37988MEDIUM Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Creative Solutions Contact Form Generator plugin <= 2.5.5 versions. | Aug 10, 2023 | 6.1 | 29 | NO | YES |
CVE-2015-6965MEDIUM Multiple cross-site request forgery (CSRF) vulnerabilities in the Contact Form Generator plugin 2.0.1 and earlier for WordPress allow remote attackers to hijack the authentication | Sep 16, 2015 | 6.8 | 27 | NO | YES |
CVE-2023-23758CRITICAL Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability allows SQL Injection. | Aug 7, 2023 | 9.8 | 26 | NO | NO |
CVE-2020-9364MEDIUM An issue was discovered in helpers/mailer.php in the Creative Contact Form extension 4.6.2 before 2019-12-03 for Joomla!. A directory traversal vulnerability resides in the filenam | Mar 4, 2020 | 5.3 | 21 | NO | NO |
CVE-2025-52794HIGH Cross-Site Request Forgery (CSRF) vulnerability in Creative-Solutions Creative Contact Form sexy-contact-form allows Stored XSS.This issue affects Creative Contact Form: from n/a t | Jun 20, 2025 | 7.1 | 19 | NO | NO |
Signals from CVEs in this vendor scope (7 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Creative Solutions.
Media articles that mention a CVE ID that affects a product developed by Creative Solutions — matched by CVE ID, not by vendor name.