bestweblayout has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 7.2 (high).
CVEs per month
Last 12 months, by publish date
1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.2
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
Weakness classes
Products
- Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress 1
- contact-form-to-db 1
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
CVE-2026-13359High· 7.2The Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via cntctfrm_contact_dropdown Parameter in all versions up to, and including, 1.7.5 due to i…40CVE-2026-39745High· 7.1Unauthenticated Cross Site Scripting (XSS) in Contact Form to DB by BestWebSoft <= 1.7.6 versions.39
bestweblayout vulnerabilities
CVEs affecting bestweblayout, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-39745High· 7.1Unauthenticated Cross Site Scripting (XSS) in Contact Form to DB by BestWebSoft <= 1.7.6 versions.
Unauthenticated Cross Site Scripting (XSS) in Contact Form to DB by BestWebSoft <= 1.7.6 versions.
▾ Twilightbestweblayout · contact-form-to-dbEPSS 0.23%via NVD
CVE-2026-13359High· 7.2The Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via cntctfrm_contact_dropdown Parameter in all versions up to, and including, 1.7.5 due to i…
The Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via cntctfrm_contact_dropdown Parameter in all versions up to, and including, 1.7.5 due to i…
▾ Twilightbestweblayout · Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPressEPSS 0.40%via NVD