Skip to main content
ExploitPublished

WordPress Plugin Supsystic Contact Form 1.7.36 · SSTI

Source Exploit-DB RSS Feed

0
Severity
Medium

Rated by Threat Radar

Data as of 20 May 2026, 19:19 UTC

What to do

AI-suggested

Until an official fix is released, users should consider disabling or removing the vulnerable plugin version 1.7.36. Monitor official Supsystic plugin channels for updates and apply patches promptly once available.

Description

WordPress Plugin Supsystic Contact Form 1.7.36 - SSTI

Indicators of compromise

Exploit source code

Exploit code for WordPress Plugin Supsystic Contact Form 1.7.36 - SSTI6,037 characters
# Exploit Title: WordPress Plugin Supsystic Contact Form 1.7.36 - SSTI
# Date: 3/30/2026
# Exploit Author: bootstrapbool
# Vendor Homepage: https://supsystic.com/plugins/contact-form-plugin/
# Software Link: https://wordpress.org/plugins/contact-form-by-supsystic/
# Version: <= 1.7.36
# Tested on: Ubuntu 24 and Windows 10
# CVE : CVE-2026-4257


import argparse
import base64
import re
import requests

class status:
    OKGREEN = "\033[32m"
    WARNING = "\033[33m"
    FAIL = "\033[31m"
    ENDC …

References

Community reviews

Loading reviews…