Known vulnerabilities in CP Contact Form with PayPal

Easily create contact forms with integrated PayPal payments. Accept service payments, orders, and more with a drag-and-drop form builder.

8Reported vulnerabilities

8.8Highest CVSS score

1.3.67Latest version

800+Active installs

What to do now

Update CP Contact Form with PayPal to 1.3.62 or later. 8 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 17, 2026 / Tested up to WordPress: 7.1 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2019-14785	Medium 5.4	0.8%	Before 1.2.99	`1.2.99`	August 9, 2019
CVE-2015-9233	High 8.8	1.0%	Before 1.1.6	`1.1.6`	September 30, 2017
CVE-2015-9234	High 7.2	2.0%	1.1.5 and earlier	`1.1.6`	September 30, 2017
CVE-2025-13384	High 7.5	0.4%	0 to 1.3.56 (inclusive)	`1.3.57`	November 22, 2025
CVE-2026-32433	Medium 6.5	0.2%	1.3.61 and earlier	`1.3.62`	March 2, 2026
CVE-2024-13758	Medium 6.5	0.3%	Before 1.3.53	`1.3.53`	January 30, 2025
CVE-2019-14784	Medium 6.1	0.9%	Before 1.2.98	`1.2.98`	August 15, 2019
CVE-2023-27460	Medium 4.3	0.4%	1.3.34 and earlier	`1.3.35`	March 1, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.