420 matches found
Sql injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BestWebSoft Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress.This issue affects Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress: from n/a throug...
CVE-2023-29096
CVE-2023-29096 affects the WordPress plugin Contact Form to DB by BestWebSoft – Messages Database, with an SQL Injection due to improper neutralization of input in an SQL command. Affected versions:
CVE-2023-29096 WordPress Contact Form to DB by BestWebSoft Plugin <= 1.7.0 is vulnerable to SQL Injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BestWebSoft Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress.This issue affects Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress: from n/a throug...
PT-2023-22144 · Bestwebsoft · Contact Form To Db
Name of the Vulnerable Software and Affected Versions: Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress versions 1.7.0 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL comman...
WordPress Plugin Contact Form to DB by BestWebSoft SQL Injection Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...
BestWebSoft's Like & Share < 2.74 - Unauthenticated Password Protected Post Read
Description The plugin discloses the content of password protected posts to unauthenticated users via a meta tag PoC In the web browser, view the source of any password protected post and check the og:description meta tag...
CVE-2023-36527
Improper Neutralization of Formula Elements in a CSV File vulnerability in BestWebSoft Post to CSV by BestWebSoft.This issue affects Post to CSV by BestWebSoft: from n/a through 1.4.0...
CVE-2023-36527
Improper Neutralization of Formula Elements in a CSV File vulnerability in BestWebSoft Post to CSV by BestWebSoft.This issue affects Post to CSV by BestWebSoft: from n/a through 1.4.0...
CVE-2023-36527
A vulnerability in bestweblayout Post to CSV by BestWebSoft post-to-csv.This issue affects Post to CSV by BestWebSoft: from n/a through = 1.4.0...
Input validation
Improper Neutralization of Formula Elements in a CSV File vulnerability in BestWebSoft Post to CSV by BestWebSoft.This issue affects Post to CSV by BestWebSoft: from n/a through 1.4.0...
CVE-2023-36527 WordPress Post to CSV by BestWebSoft Plugin <= 1.4.0 is vulnerable to CSV Injection
Improper Neutralization of Formula Elements in a CSV File vulnerability in BestWebSoft Post to CSV by BestWebSoft.This issue affects Post to CSV by BestWebSoft: from n/a through 1.4.0...
CVE-2023-36527
CVE-2023-36527 affects the WordPress plugin Post to CSV by BestWebSoft. The vulnerability stems from improper neutralization of formula elements in CSV files, enabling CSV injection. Affected versions are
CVE-2023-36527 WordPress Post to CSV by BestWebSoft plugin <= 1.4.0 - CSV Injection
A vulnerability in bestweblayout Post to CSV by BestWebSoft post-to-csv.This issue affects Post to CSV by BestWebSoft: from n/a through = 1.4.0...
WordPress Plugin Post to CSV by BestWebSoft Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...
PT-2023-25610 · Bestwebsoft · Post To Csv
Name of the Vulnerable Software and Affected Versions: BestWebSoft Post to CSV versions 1.4.0 and earlier Description: The issue is related to the improper neutralization of formula elements in a CSV file. This can potentially lead to unintended actions when the CSV file is opened or processed...
CVE-2023-36508
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BestWebSoft Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress contact-form-to-db allows SQL Injection.This issue affects Contact Form to DB by BestWebSoft – Messages Databa...
CVE-2023-36508
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BestWebSoft Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress contact-form-to-db allows SQL Injection.This issue affects Contact Form to DB by BestWebSoft – Messages Databa...
CVE-2023-36508
A vulnerability in bestweblayout Contact Form to DB by BestWebSoft contact-form-to-db.This issue affects Contact Form to DB by BestWebSoft: from n/a through = 1.7.1...
CVE-2023-36508
CVE-2023-36508 —SQL Injection in the WordPress plugin "Contact Form to DB by BestWebSoft – Messages Database". Affected versions: from n/a through 1.7.1 (BestWebSoft). Root cause: improper neutralization of input in SQL commands, enabling unauthenticated injection under administrator context. Imp...
CVE-2023-36508 WordPress Contact Form to DB by BestWebSoft Plugin <= 1.7.1 is vulnerable to SQL Injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BestWebSoft Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress contact-form-to-db allows SQL Injection.This issue affects Contact Form to DB by BestWebSoft – Messages Databa...