4947 matches found
CVE-2017-18492
The contact-form-to-db plugin before 1.5.7 for WordPress has multiple XSS issues...
CVE-2017-18491
The contact-form-plugin plugin before 4.0.6 for WordPress has multiple XSS issues...
CVE-2017-18492
The contact-form-to-db plugin before 1.5.7 for WordPress has multiple XSS issues...
CVE-2018-20964
The contact-form-to-email plugin before 1.2.66 for WordPress has CSRF...
CVE-2017-18489
The contact-form-7-sms-addon plugin before 2.4.0 for WordPress has XSS...
CVE-2017-18490
The contact-form-multi plugin before 1.2.1 for WordPress has multiple XSS issues...
CVE-2016-10869
The contact-form-plugin plugin before 4.0.2 for WordPress has XSS...
CVE-2013-7475
The contact-form-plugin plugin before 3.52 for WordPress has XSS...
CVE-2015-9295
The contact-form-plugin plugin before 3.96 for WordPress has XSS...
Cross site scripting
The contact-form-to-db plugin before 1.5.7 for WordPress has multiple XSS issues...
Cross site scripting
The contact-form-plugin plugin before 3.52 for WordPress has XSS...
Cross site scripting
The contact-form-plugin plugin before 3.96 for WordPress has XSS...
Cross site scripting
The contact-form-to-email plugin before 1.2.66 for WordPress has XSS...
Cross site scripting
The contact-form-7-sms-addon plugin before 2.4.0 for WordPress has XSS...
Cross site request forgery (csrf)
The contact-form-to-email plugin before 1.2.66 for WordPress has CSRF...
Cross site scripting
The contact-form-plugin plugin before 4.0.6 for WordPress has multiple XSS issues...
Cross site scripting
The contact-form-multi plugin before 1.2.1 for WordPress has multiple XSS issues...
Design/Logic Flaw
The contact-form-plugin plugin before 4.0.2 for WordPress has XSS...
CVE-2017-18489
The contact-form-7-sms-addon plugin before 2.4.0 for WordPress has XSS...
CVE-2017-18489
CVE-2017-18489 affects the WordPress plugin Contact Form 7 SMS Addon prior to v2.4.0. The vulnerability is a reflected XSS in the file that prints the GET parameter 'to' (vulnerability in plugins/clockwork-two-factor-authentication/templates/clockwork-test-message.php per PoC). Exploitation targe...