CVE-2008-0198

Multiple cross-site request forgery (CSRF) vulnerabilities in wp-contact-form/options-contactform.php in the WP-ContactForm 1.5 alpha and earlier plugin for WordPress allow remote attackers to perform actions as administrators via the (1) wpcf_question, (2) wpcf_success_msg, or (3) wpcf_error_msg parameter to wp-admin/admin.php.

• CWE-352

• http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.htmlBroken Link, Exploit, Third Party Advisory
• http://securityreason.com/securityalert/3539Broken Link, Third Party Advisory
• http://securityvulns.ru/Sdocument546.htmlBroken Link, Third Party Advisory
• http://securityvulns.ru/Sdocument667.htmlBroken Link, Third Party Advisory
• http://websecurity.com.ua/1600/Third Party Advisory
• http://websecurity.com.ua/1641/Third Party Advisory
• http://www.securityfocus.com/archive/1/485786/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
• http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.htmlBroken Link, Exploit, Third Party Advisory
• http://securityreason.com/securityalert/3539Broken Link, Third Party Advisory
• http://securityvulns.ru/Sdocument546.htmlBroken Link, Third Party Advisory
• http://securityvulns.ru/Sdocument667.htmlBroken Link, Third Party Advisory
• http://websecurity.com.ua/1600/Third Party Advisory
• http://websecurity.com.ua/1641/Third Party Advisory
• http://www.securityfocus.com/archive/1/485786/100/0/threadedBroken Link, Third Party Advisory, VDB Entry

Published

Jan 10, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-0192Multiple cross-site scripting (XSS) vulnerabilities in WordP…
• CVE-2008-0193Cross-site scripting (XSS) vulnerability in wp-db-backup.php…
• CVE-2008-0194Directory traversal vulnerability in wp-db-backup.php in Wor…
• CVE-2008-0195WordPress 2.0.11 and earlier allows remote attackers to obta…
• CVE-2008-0196Multiple directory traversal vulnerabilities in WordPress 2.…
• CVE-2008-0197Multiple cross-site scripting (XSS) vulnerabilities in wp-co…
• CVE-2008-0199PRO-Search 0.17 and earlier allows remote attackers to cause…
• CVE-2008-0200Multiple cross-site scripting (XSS) vulnerabilities in accou…
• CVE-2008-0201Cross-site scripting (XSS) vulnerability in index.php in Exp…
• CVE-2008-0202CRLF injection vulnerability in index.php in ExpressionEngin…
• CVE-2008-0203Multiple cross-site scripting (XSS) vulnerabilities in crypt…
• CVE-2008-0204Multiple cross-site scripting (XSS) vulnerabilities in math-…