https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-12184.htmlhttps://patchthecve.com/cve/CVE-2024-12184.htmlWed, 17 Jun 2026 06:59:12 +0000MEDIUM 5.3: The WordPress Contact Forms by Cimatti plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the accua_forms_download_submitted_file() function in all versions up to, and including, 1.9.4. This makes it possible for unauthenticated attackers to downlohttps://patchthecve.com/cve/CVE-2023-35051.htmlhttps://patchthecve.com/cve/CVE-2023-35051.htmlWed, 17 Jun 2026 06:04:20 +0000MEDIUM 5.4: Missing Authorization vulnerability in Cimatti Consulting Contact Forms by Cimatti allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Forms by Cimatti: from n/a through 1.5.7.https://patchthecve.com/cve/CVE-2024-10521.htmlhttps://patchthecve.com/cve/CVE-2024-10521.htmlWed, 17 Jun 2026 06:55:51 +0000MEDIUM 4.3: The WordPress Contact Forms by Cimatti plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.9.2. This is due to missing or incorrect nonce validation on the process_bulk_action function. This makes it possible for unauthenticated attackers to delet