IT Path Solutions

Products

ProductCVEsExploitedLatest
Contact Form to Any API3–Jun 15, 2026
SCSS WP Editor1–Apr 1, 2025

Exploited and recent CVEs

  • CVE-2026-39449 High 7.1 WordPress Contact Form to Any API plugin <= 3.0.3 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-31808 Medium 4.3 WordPress SCSS WP Editor plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2023-47871 Medium 4.3 WordPress Contact Form to Any API plugin <= 1.1.6 - Broken Access Control vulnerability 0.5%
  • CVE-2024-30242 High 8.5 WordPress Contact Form to Any API plugin <= 1.1.8 - Auth. SQL Injection vulnerability 0.5%