EDB-52564
PoCWordPress Plugin Supsystic Contact Form 1.7.36 - SSTI
view exploit source exploit_dbtype webappsauthor bootstrapboolpublished 2026-05-14catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-4257US | — | Exploit | ||
The Contact Form by Supsystic plugin for WordPress is vulnerable to Server-Side Template Injection (SSTI) leading to Remote Code Execution (RCE) in all versions up to, and includin… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan