Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Super Simple Contact Form plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'sscf_name' parameter in all versions up to, and including, 1.6.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-02-14 | 2 | Disclosure2 |
| 2026-02-15 | 1 | Patch1 |
CVE-2026-0753 Reflected XSS in Super Simple Contact Form WordPress Plugin Before 1.6.3 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-0753
Post summary
The text announces CVE-2026-0753, a reflected XSS vulnerability affecting Super Simple Contact Form WordPress Plugin versions prior to 1.6.3, with no additional exploit or patch details provided.
CVE-2026-0753 The Super Simple Contact Form plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'sscf_name' parameter in all versions up to, and including, 1… https://www.cve.org/CVERecord?id=CVE-2026-0753
Post summary
The text reports CVE‑2026‑0753 as a reflected XSS flaw in the Super Simple Contact Form plugin, without mentioning PoC, exploit code, or patch details.
🚨 HIGH severity XSS in Super Simple Contact Form for WordPress! All versions up to 1.6.2 at risk. Disable or remove plugin until patched. Protect users from session theft & data loss. https://radar.offseq.com/threat/cve-2026-0753-cwe-79-improper-neutralization-of-in-6158470c #... https://t.co/CbfthcZ9Db
Post summary
High‑severity XSS (CVE‑2026‑0753) affects Super Simple Contact Form WordPress plugin versions up to 1.6.2; users are advised to disable or remove the plugin until a patch is released.