Lucene search
K

CVE-2022-3604

๐Ÿ—“๏ธย 16 Jan 2024ย 15:52:59Reported byย WPScanTypeย 
cve
ย cve
๐Ÿ”—ย web.nvd.nist.gov๐Ÿ“ฐ๏ธย 1ย Media mentions๐Ÿ‘ย 46ย Views๐ŸŒ WEB

The Contact Form Entries WordPress plugin before 1.3.0 allows CSV injectio

Related
Detection
Affected
Refs
Paths
Social
ReporterTitlePublishedViews
Family
Circl
CVE-2022-3604
24 Jan 202419:16
โ€“circl
CNNVD
WordPress plugin Contact Form Entries Security Vulnerability
16 Jan 202400:00
โ€“cnnvd
Cvelist
CVE-2022-3604 Contact Form Entries < 1.3.0 - CSV Injection
16 Jan 202415:52
โ€“cvelist
EUVD
EUVD-2022-42967
3 Oct 202520:07
โ€“euvd
NVD
CVE-2022-3604
16 Jan 202416:15
โ€“nvd
Prion
Design/Logic Flaw
16 Jan 202416:15
โ€“prion
Positive Technologies
PT-2024-11597 ยท WordPress ยท Contact Form Entries
16 Jan 202400:00
โ€“ptsecurity
RedhatCVE
CVE-2022-3604
22 May 202523:10
โ€“redhatcve
Vulnrichment
CVE-2022-3604 Contact Form Entries < 1.3.0 - CSV Injection
16 Jan 202415:52
โ€“vulnrichment
wpexploit
Contact Form Entries < 1.3.0 - CSV Injection
21 Oct 202200:00
โ€“wpexploit
Rows per page
[
  {
    "vendor": "Unknown",
    "product": "Contact Form Entries",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThan": "1.3.0"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]
ParameterPositionPathDescriptionCWE
pagepathwp-admin/admin.php?page=vxcf_leadsCSV injection via unvalidated data exported to CSVCWE-1236

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

11 Jun 2025 17:15Current
7.7High risk
Vulners AI Score7.7
CVSS 3.17.8
EPSS0.00335
SSVC
46