https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T17:55:27.375845+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-12718 CVE-2025-12718 — Quick Contact Form <= 8.2.6 - Unauthenticated Open Mail Relay 2026-10-06T17:55:27.391364+00:00

Affected: saadiqbal Quick Contact Form

The Quick Contact Form plugin for WordPress is vulnerable to Open Mail Relay in all versions up to, and including, 8.2.6. This is due to the 'qcf_validate_form' AJAX endpoint allowing a user controlled parameter to set the 'from' email address. This makes it possible for unauthenticated attackers to send emails to arbitrary recipients utilizing the server. The information is limited to the contact form submission details.