4960 matches found
WordPress WPB Popup for Contact Form 7 plugin <= 1.7.5 - Unauthenticated Arbitrary Shortcode Execution via wpb_pcf_fire_contact_form vulnerability
Unauthenticated Arbitrary Shortcode Execution via wpbpcffirecontactform vulnerability discovered by Arkadiusz Hydzik in WordPress Plugin WPB Popup for Contact Form 7 versions = 1.7.5...
WordPress plugin WPB Popup for Contact Form 代码注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code injection...
WordPress WPB Popup for Contact Form 7 Plugin <= 1.7.5 is vulnerable to Broken Access Control
Software WPB Popup for Contact Form 7 Type Plugin Vulnerable versions = 1.7.5 Fixed in 1.7.6 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-11038 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 9b3456d161fd Credits Arkadiusz...
WordPress SimpleForm Contact Form Submissions plugin <= 2.1.0 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin SimpleForm Contact Form Submissions versions = 2.1.0...
WordPress SimpleForm Contact Form Submissions Plugin <= 2.1.0 is vulnerable to Cross Site Scripting (XSS)
Software SimpleForm Contact Form Submissions Type Plugin Vulnerable versions = 2.1.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10884 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 1b7fe42353c4 Credits...
WordPress CF7 Reply Manager plugin <= 1.2.3 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Plugin CF7 Reply Manager versions = 1.2.3...
CVE-2024-10685
CVE-2024-10685 concerns the WordPress plugin “Contact Form 7 Redirect & Thank You Page.” The vulnerability is a Reflected Cross-Site Scripting (XSS) in the tab parameter, present in all versions up to 1.0.6 due to insufficient input sanitization and output escaping. This allows unauthenticated at...
CVE-2024-10685 Contact Form 7 Redirect & Thank You Page <= 1.0.6 - Reflected Cross-Site Scripting
The Contact Form 7 Redirect & Thank You Page plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in all versions up to, and including, 1.0.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...
WordPress Contact Form 7 Redirect & Thank You Page plugin <= 1.0.6 - Reflected Cross-Site Scripting vulnerability
Reflected Cross-Site Scripting vulnerability discovered by Le Ngoc Anh in WordPress Plugin Contact Form 7 Redirect & Thank You Page versions = 1.0.6...
WordPress plugin Contact Form 7 Redirect & Thank You Page 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...
PT-2024-16461 · WordPress · Cf7 Wow Styler
Name of the Vulnerable Software and Affected Versions: Design for Contact Form 7 Style WordPress Plugin – CF7 WOW Styler plugin for WordPress versions up to, and including, 1.6.8 Description: The issue is related to Reflected Cross-Site Scripting via the style scheme parameter due to insufficient...
WordPress Contact Form 7 Redirect & Thank You Page Plugin <= 1.0.6 is vulnerable to Cross Site Scripting (XSS)
Software Contact Form 7 Redirect & Thank You Page Type Plugin Vulnerable versions = 1.0.6 Fixed in 1.0.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10685 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b725076f7fcb...
WordPress Contact Form by WPForms Plugin <= 1.9.1.6 is vulnerable to Cross Site Request Forgery (CSRF)
Software Contact Form by WPForms Type Plugin Vulnerable versions = 1.9.1.6 Fixed in 1.9.2.1 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-10593 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 3b41c5288f1e Credits Asaf...
PT-2024-16460 · WordPress · Contact Form 7 Redirect & Thank You Page
Name of the Vulnerable Software and Affected Versions: Contact Form 7 Redirect & Thank You Page plugin for WordPress versions up to, and including, 1.0.6 Description: The issue is related to Reflected Cross-Site Scripting via the tab parameter due to insufficient input sanitization and output...
CVE-2024-10683
The Contact Form 7 – PayPal & Stripe Add-on plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg & removequeryarg without appropriate escaping on the URL in all versions up to, and including, 2.3.1. This makes it possible for unauthenticated attackers...
CVE-2024-10683
CVE-2024-10683 affects the WordPress plugin Contact Form 7 – PayPal & Stripe Add-on, due to unsafe use of add_query_arg/remove_query_arg without proper escaping. The issue is Reflected XSS, exploitable by unauthenticated actors who can trick a user into clicking a manipulated link, with exploitat...
WordPress Contact Form 7 - PayPal & Stripe Add-on plugin <= 2.3.1 - Reflected Cross-Site Scripting vulnerability
WordPress Contact Form 7 - PayPal & Stripe Add-on plugin = 2.3.1 - Reflected Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin Contact Form 7 – PayPal & Stripe Add-on versions = 2.3.1...
PT-2024-34835 · Unknown · Cf7 Wow Styler
Name of the Vulnerable Software and Affected Versions: CF7 WOW Styler versions 1.6.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows Reflected XSS, which can be exploited...
WordPress plugin Contact Form 7 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...