Lucene search
+L

4965 matches found

Vulnrichment
Vulnrichment
added 2025/04/04 3:58 p.m.13 views

CVE-2025-32126 WordPress Pay with Contact Form 7 Plugin <= 1.0.4 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in cmsMinds Pay with Contact Form 7 pay-with-contact-form-7 allows SQL Injection.This issue affects Pay with Contact Form 7: from n/a through = 1.0.4...

7.6CVSS7.3AI score0.00622EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/04 3:58 p.m.64 views

CVE-2025-32126

The CVE CVE-2025-32126 affects the WordPress plugin Pay with Contact Form 7 by cmsMinds. It is an SQL Injection vulnerability caused by improper neutralization of input in SQL commands, affecting versions from n/a up to 1.0.4. The CVSS indicates high impact on confidentiality (C) but no impact on...

7.6CVSS7.3AI score0.00622EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/04 3:58 p.m.26 views

CVE-2025-32126 WordPress Pay with Contact Form 7 Plugin <= 1.0.4 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in cmsMinds Pay with Contact Form 7 pay-with-contact-form-7 allows SQL Injection.This issue affects Pay with Contact Form 7: from n/a through = 1.0.4...

7.6CVSS0.00622EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/04/04 1:30 p.m.16 views

WordPress Contact Form Builder by vcita plugin <= 4.10.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by theviper17 in WordPress Plugin Contact Form Builder by vcita versions = 4.10.2...

6.5CVSS6.9AI score0.0027EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/04/04 12:00 a.m.8 views

WordPress plugin Pay with Contact Form 7 SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability exist...

7.6CVSS8.3AI score0.00622EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/04 12:00 a.m.12 views

PT-2025-14918 · Unknown · Cmsminds Pay With Contact Form 7

Name of the Vulnerable Software and Affected Versions: cmsMinds Pay with Contact Form 7 versions 1.0.0 through 1.0.4 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

7.6CVSS8.2AI score0.00622EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/04/04 12:00 a.m.9 views

WordPress plugin WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

4.3CVSS6AI score0.00188EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/04/03 3:43 p.m.11 views

CVE-2025-31821

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in formsintegrations Integration of Zoho CRM and Contact Form 7 allows Phishing. This issue affects Integration of Zoho CRM and Contact Form 7: from n/a through 1.0.6...

4.7CVSS7.1AI score0.00424EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/03 2:15 p.m.10 views

CVE-2025-31582

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ashish Ajani Contact Form vCard Generator contact-form-vcard-generator allows Stored XSS.This issue affects Contact Form vCard Generator: from n/a through = 2.4...

7.1CVSS0.00288EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/03 1:27 p.m.21 views

CVE-2025-31582 WordPress Contact Form vCard Generator plugin <= 2.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ashish Ajani Contact Form vCard Generator contact-form-vcard-generator allows Stored XSS.This issue affects Contact Form vCard Generator: from n/a through = 2.4...

7.1CVSS0.00288EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/03 1:27 p.m.5 views

CVE-2025-31582 WordPress Contact Form vCard Generator plugin <= 2.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ashish Ajani Contact Form vCard Generator allows Stored XSS. This issue affects Contact Form vCard Generator: from n/a through 2.4...

7.1CVSS6.9AI score0.00288EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/03 12:00 a.m.8 views

WordPress plugin Contact Form vCard Generator 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

7.1CVSS6.8AI score0.00288EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/03 12:00 a.m.8 views

WordPress plugin CF7 Spreadsheets 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS6.9AI score0.00288EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/03 12:00 a.m.11 views

PT-2025-14726 · Unknown · Ashish Ajani Contact Form Vcard Generator

Name of the Vulnerable Software and Affected Versions: Ashish Ajani Contact Form vCard Generator versions n/a through 2.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that ...

7.1CVSS7.1AI score0.00288EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2025/04/01 3:59 p.m.9 views

WordPress Integration of Zoho CRM and Contact Form 7 plugin <= 1.0.7 - Open Redirection Vulnerability

Open Redirection Vulnerability discovered by Le Ngoc Anh in WordPress Plugin Integration of Zoho CRM and Contact Form 7 versions = 1.0.7...

4.7CVSS8.2AI score0.00424EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/04/01 3:16 p.m.14 views

CVE-2025-31821

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in formsintegrations Integration of Zoho CRM and Contact Form 7 allows Phishing. This issue affects Integration of Zoho CRM and Contact Form 7: from n/a through 1.0.6...

4.7CVSS0.00424EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/01 2:51 p.m.20 views

CVE-2025-31821 WordPress Integration of Zoho CRM and Contact Form 7 plugin <= 1.0.6 - Open Redirection Vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in formsintegrations Integration of Zoho CRM and Contact Form 7 allows Phishing. This issue affects Integration of Zoho CRM and Contact Form 7: from n/a through 1.0.6...

4.7CVSS0.00424EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/01 2:51 p.m.56 views

CVE-2025-31821

CVE-2025-31821 describes an Open Redirect vulnerability in the plugin Integration of Zoho CRM and Contact Form 7 (versions up to 1.0.6). The CVSSv3.1 base score is 4.7 (Medium) with a network attack vector, low attack complexity, no privileges, and user interaction required. According to the prim...

4.7CVSS7.1AI score0.00424EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/01 2:51 p.m.7 views

CVE-2025-31821 WordPress Integration of Zoho CRM and Contact Form 7 plugin <= 1.0.6 - Open Redirection Vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in formsintegrations Integration of Zoho CRM and Contact Form 7 allows Phishing. This issue affects Integration of Zoho CRM and Contact Form 7: from n/a through 1.0.6...

4.7CVSS7.1AI score0.00424EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/01 12:00 a.m.9 views

WordPress plugin Integration of Zoho CRM and Contact Form 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An input validation error vulnerability exists...

4.7CVSS5.9AI score0.00424EPSS
SaveExploits0References2
Rows per page
Query Builder