CVE-2026-115591: WordPress Contact Form by Supsystic plugin <= 1.10.5 - Sensitive Data Exposure vulnerability

Q: Who can exploit this issue?

The supplied CVSS vector indicates that exploitation is possible over the network, requires no privileges or user interaction, and has low attack complexity.

Q: What is the likely security impact?

The issue can expose embedded sensitive data. The provided severity data indicates high confidentiality impact, with no integrity or availability impact.

Q: Which versions are affected?

Contact Form by Supsystic is affected through version 1.10.5. The provided data does not identify a fixed version.

Q: Is a default installation affected?

The available information does not state whether a default configuration is affected or identify any configuration prerequisites.

Published Oct 28, 2026

Updated

Insertion of Sensitive Information Into Sent Data vulnerability in Supsystic Contact Form by Supsystic contact-form-by-supsystic allows Retrieve Embedded Sensitive Data.This issue affects Contact Form by Supsystic: from n/a through 1.10.5.

Affected Software

1 affected component

Supsystic Contact Form by Supsystic<=1.10.5

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress Contact Form by Supsystic to a version that resolves this vulnerability.
Fixed in 1.10.7

Event History

Oct 28, 2026

CVE Published

via MITRE·01:00 PM

Data Sourced

via MITRE·01:00 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The supplied CVSS vector indicates that exploitation is possible over the network, requires no privileges or user interaction, and has low attack complexity.

What is the likely security impact?

The issue can expose embedded sensitive data. The provided severity data indicates high confidentiality impact, with no integrity or availability impact.

Which versions are affected?

Contact Form by Supsystic is affected through version 1.10.5. The provided data does not identify a fixed version.

Is a default installation affected?

The available information does not state whether a default configuration is affected or identify any configuration prerequisites.

CVE-2026-115591: WordPress Contact Form by Supsystic plugin <= 1.10.5 - Sensitive Data Exposure vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the likely security impact?

Which versions are affected?

Is a default installation affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the likely security impact?

Which versions are affected?

Is a default installation affected?