CVE-2026-73379

WordPress Contact Form by Supsystic plugin < 1.10.0 - Bypass Vulnerability vulnerability

Unauthenticated Bypass Vulnerability in Contact Form by Supsystic < 1.10.0 versions.

We have discovered 1,613 live websites that are affected by CVE-2026-73379.

Run a Free Instant Scan



Affected Software

Product  Contact Form By Supsystic
Category Wordpress Plugins
Vulnerable Domains1,613 live websites (100% of Contact Form By Supsystic install base)
Vulnerable Versions
  • from 0 through 1.10
Vulnerable Versions Count68 versions ( 100% of all versions)


Common Weakness Enumeration

CWE-288 Authentication Bypass Using an Alternate Path or Channel



Details

  • Published - Aug 18, 2026
  • Updated - Aug 18, 2026

Credits

  • Asim Alshaya | Patchstack Bug Bounty Program (finder)

Website Distribution by Country

Number of websites using CVE-2026-73379
United States413 websites


Australia164 websites
Germany150 websites
GB89 websites
France86 websites
Poland81 websites
Netherlands75 websites
Italy55 websites
Romania50 websites
Czech Republic44 websites

Website Distribution by TLD

Number of websites using CVE-2026-73379
.com554 websites
.com.au165 websites
.de98 websites
.org85 websites
.nl67 websites
.pl60 websites
.co.uk43 websites
.it40 websites
.net35 websites
.cz35 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2026-73379

Top websites that are affected by CVE-2026-73379. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
****************.***.au Australia**,***
**************.de United States***,***
*********.com United States***,***
**********.com United States***,***
*********.com United States***,***
****************.com France***,***
***********.com United States***,***
***********.pl Poland***,***
*************.pl Poland***,***
**************.**.uk GB***,***
See full domain list

FAQ

CVE-2026-73379 is Authentication Bypass Using an Alternate Path or Channel in Contact Form By Supsystic
A total of 1,613 websites have been identified as vulnerable to CVE-2026-73379, based on global website indexing conducted by WebTechSurvey.
The Contact Form By Supsystic is affected by the CVE-2026-73379 vulnerability.
Contact Form By Supsystic versions up to 1.10 are vulnerable to CVE-2026-73379.
CVE-2026-73379 is resolved in version 1.10 of Contact Form By Supsystic.