Live › vulnerability › CVE-2026-115591
Go to dashboardThe Contact Form by Supsystic WordPress plugin, through version 1.10.5, inserts sensitive information into data it sends to visitors. An attacker can retrieve that embedded sensitive data from the plugin's output.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 13:33 UTC. All times on this page are UTC.
Sites running Contact Form by Supsystic at version or earlier are affected. Sites that do not have the plugin installed can skip it. The sources do not say which data fields or configurations expose the sensitive content.
1.10.5No product ranges from the sources yet.
wp plugin get contact-form-by-supsystic --field=version1.10.5 once a fixed release is confirmedEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Insertion of Sensitive Information Into Sent Data vulnerability in Supsystic Contact Form by Supsystic contact-form-by-supsystic allows Retrieve Embedded Sensitive Data.This issue affects Contact Form by Supsystic: from n/a through 1.10.5.
This page as .md · .json · in your agent: get_signal("CVE-2026-115591")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.