CVE-2026-32433:
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in codepeople CP Contact Form with Paypal cp-contact-form-with-paypal allows Blind SQL Injection.This issue affects CP Contact Form with Paypal: from n/a through <= 1.3.61.
Score
A numerical rating that indicates how dangerous this vulnerability is.
8.5HighA numerical rating that indicates how dangerous this vulnerability is.
- Published Date:Mar 13, 2026
- CISA KEV Date:*No Data*
- Industries Affected:20
Threat Predictions
- EPSS Score:0.0
- EPSS Percentile:8%
Exploitability
- Score:3.1
- Attack Vector:NETWORK
- Attack Complexity:LOW
- Privileges Required:LOW
- User Interaction:NONE
- Scope:CHANGED
Impact
- Score:4.7
- Confidentiality Impact:HIGH
- Integrity Impact:NONE
- Availability Impact:LOW
Description Preview
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in codepeople CP Contact Form with Paypal cp-contact-form-with-paypal allows Blind SQL Injection.This issue affects CP Contact Form with Paypal: from n/a through <= 1.3.61.
Industries Affected
Below is a list of industries most commonly impacted or potentially at risk based on intelligence.
Low
