Missing Authorization Vulnerability in Codepeople Contact Form Email by WordPress
CVE-2026-32483

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
Contact Form Email
Vendor
CVE Published:
25 March 2026

What is CVE-2026-32483?

A missing authorization vulnerability has been identified in the Codepeople Contact Form Email plugin, which allows for the improper configuration of access control security levels. This flaw could potentially enable unauthorized access to sensitive functionality, impacting users who rely on this plugin for secure email communication. Affected versions include all releases from version n/a to version 1.3.63. Developers and website owners are urged to review their configurations and promptly update to secure their installations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Contact Form Email <= n/a

References

https://patchstack.com/database/Wordpress/Plugin/contact-...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

huli07 | Patchstack Bug Bounty Program
JSON
.