41,554 blogs · 5,225,211 posts Claim your blog

Record · corpus.blog/posts/01a08784-d607-727c-a49f-c66e74cb204a

CVE-2026-4257: SSTI to RCE in Contact Form by Supsystic

hurayraiit.com · published 30 March 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at hurayraiit.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 8
Words captured: 1,974

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://wordpress.org/plugins/contact-form-by-supsystic/

wordpress.org

https://www.cve.org/CVERecord?id=CVE-2026-4257

cve.org

https://downloads.wordpress.org/plugin/contact-form-by-supsystic.1.7.36.zip

downloads.wordpress.org

https://downloads.wordpress.org/plugin/contact-form-by-supsystic.1.8.0.zip

downloads.wordpress.org

https://www.linkedin.com/in/0xazr/

linkedin.com

https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/contact-form-by-supsystic/contact-form-by-supsystic-1736-unauthenticated-server-side-template-injection-via-prefill-functionality

wordfence.com

https://plugins.trac.wordpress.org/browser/contact-form-by-supsystic/tags/1.7.36/modules/forms/views/forms.php

plugins.trac.wordpress.org

https://plugins.trac.wordpress.org/changeset/3491826/contact-form-by-supsystic

plugins.trac.wordpress.org