An issue exists in Joomla! prior to 3.8.13. Inadequate checks in com_contact could allow mail submission in disabled forms.
joomla joomla\\!