PT-2025-1503 · Unknown · Kali Forms

Name of the Vulnerable Software and Affected Versions: Kali Forms versions 2.3.27 and earlier Description: The issue is related to a Missing Authorization vulnerability in Kali Forms Contact Form builder with drag & drop, which allows exploiting incorrectly configured access control security...

CVE-2024-56215

Missing Authorization vulnerability in DBAR Productions Member Directory and Contact Form pta-member-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Member Directory and Contact Form: from n/a through = 1.7.0...

CVE-2024-56215

Missing Authorization vulnerability in Stephen Sherrard Member Directory and Contact Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Member Directory and Contact Form: from n/a through 1.7.0...

CVE-2024-56215 WordPress Member Directory and Contact Form plugin <= 1.7.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in DBAR Productions Member Directory and Contact Form pta-member-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Member Directory and Contact Form: from n/a through = 1.7.0...

CVE-2024-56218

Cross-Site Request Forgery CSRF vulnerability in sevenspark Contact Form 7 – Dynamic Text Extension contact-form-7-dynamic-text-extension allows Cross Site Request Forgery.This issue affects Contact Form 7 – Dynamic Text Extension: from n/a through = 5.0.1...

CVE-2024-56218

Cross-Site Request Forgery CSRF vulnerability in AuRise Creative, SevenSpark Contact Form 7 Dynamic Text Extension allows Cross Site Request Forgery.This issue affects Contact Form 7 Dynamic Text Extension: from n/a through 5.0.1...

CVE-2024-56218

CVE-2024-56218 describes a Cross-Site Request Forgery (CSRF) vulnerability in Contact Form 7 Dynamic Text Extension (AuRise Creative, SevenSpark). The description states CSRF is possible in versions CF7 Dynamic Text Extension from n/a through 5.0.1. The connected documents confirm the issue type ...

CVE-2024-56218 WordPress Contact Form 7 - Dynamic Text Extension plugin <= 5.0.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in sevenspark Contact Form 7 – Dynamic Text Extension contact-form-7-dynamic-text-extension allows Cross Site Request Forgery.This issue affects Contact Form 7 – Dynamic Text Extension: from n/a through = 5.0.1...

PT-2024-36656 · Unknown · Contact Form

Name of the Vulnerable Software and Affected Versions: Contact Form, Survey & Form Builder – MightyForms versions 1.3.9 and earlier Description: A Missing Authorization vulnerability is present in Contact Form, Survey & Form Builder – MightyForms, allowing the exploitation of incorrectly configur...

PT-2024-36752 · WordPress · Contact Form 7 – Dynamic Text Extension

Name of the Vulnerable Software and Affected Versions: Contact Form 7 Dynamic Text Extension versions n/a through 5.0.1 Description: A Cross-Site Request Forgery CSRF issue affects the Contact Form 7 Dynamic Text Extension, allowing unauthorized requests. This can lead to Cross Site Request...

WordPress plugin Contact Form 7 Dynamic Text Extension 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in...

PT-2024-36749 · Unknown · Member Directory/Contact Form

Name of the Vulnerable Software and Affected Versions: Stephen Sherrard Member Directory and Contact Form versions 1.7.0 and earlier Description: The issue affects the Member Directory and Contact Form, allowing exploitation of incorrectly configured access control security levels due to a missin...

WordPress plugin Member Directory and Contact Form 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

CVE-2024-12190

The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the bitform-form-entry-edit endpoint in all versions up to, and...

CVE-2024-12190

CVE-2024-12190 affects the WordPress plugin “Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder.” The vulnerability stems from a missing capability check on the bitform-form-entry-edit endpoint, present in all versions up to and...

WordPress Contact Form 7 - Dynamic Text Extension plugin <= 5.0.1 - Cross Site Request Forgery (CSRF) vulnerability

WordPress Contact Form 7 - Dynamic Text Extension plugin = 5.0.1 - Cross Site Request Forgery CSRF vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Contact Form 7 – Dynamic Text Extension versions = 5.0.1...

WordPress Member Directory and Contact Form plugin <= 1.7.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Member Directory and Contact Form versions = 1.7.0...

CVE-2024-12250 Accept Authorize.NET Payments Using Contact Form 7 <= 2.2 - Unauthenticated Information Exposure

The Accept Authorize.NET Payments Using Contact Form 7 plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.2 via the cf7adn-info.php file. This makes it possible for unauthenticated attackers to extract configuration data which can be used to aid in...

WordPress plugin Accept Authorize.NET Payments Using Contact Form 信息泄露漏洞

WordPress and the WordPress plugin are products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. An information disclosure vulnerabili...

PT-2024-17508 · WordPress · Accept Authorize.Net Payments Using Contact Form 7

Name of the Vulnerable Software and Affected Versions: Accept Authorize.NET Payments Using Contact Form 7 plugin for WordPress versions up to, and including, 2.2 Description: The issue allows unauthenticated attackers to extract configuration data via the cf7adn-info.php file, which can be used t...