CVE-2017-18490

The CVE-2017-18490 entry concerns the WordPress plugin contact-form-multi prior to version 1.2.1, which has multiple XSS issues (CWE-79). The NVD and connected Nuclei/WP- vulnerability data confirm that authenticated attackers can execute arbitrary JavaScript in victims’ browsers, potentially ste...

CVE-2017-18490

The contact-form-multi plugin before 1.2.1 for WordPress has multiple XSS issues...

CVE-2017-18491

The CVE-2017-18491 entry corresponds to the WordPress plugin “Contact Form by BestWebSoft” up to version 4.0.6, which has multiple XSS flaws. The Nuclei template and related sources confirm the vulnerability affects this plugin and describe the impact: authenticated attackers can inject and execu...

CVE-2017-18491

The contact-form-plugin plugin before 4.0.6 for WordPress has multiple XSS issues...

CVE-2016-10869

CVE-2016-10869 affects the WordPress plugin contact-form-plugin up to version 4.0.2 . The vulnerability is an XSS flaw in the plugin (WordPress context), with CVSS v3 base score 6.1 (MEDIUM) and CVSS v2 base score 4.3 (MEDIUM) . Multiple sources (NVD, Red Hat, CNVD, CVE lists, WPVulnDB) corrobora...

CVE-2016-10869

The contact-form-plugin plugin before 4.0.2 for WordPress has XSS...

CVE-2015-9295

The WordPress plugin contact-form-plugin is affected by an XSS vulnerability in versions before 3.96. The issue is described across multiple sources (including Red Hat and CVE records) as a client-side script execution vulnerability in the plugin, with no public exploit details provided in the do...

CVE-2015-9295

The contact-form-plugin plugin before 3.96 for WordPress has XSS...

CVE-2013-7475

CVE-2013-7475 : The WordPress plugin contact-form-plugin is vulnerable to cross-site scripting in all versions before 3.52. The vulnerability is due to an XSS flaw in the plugin and affects the WordPress integration; exploitation details or in-the-wild status are not provided in the documents. No...

CVE-2017-18492

The CVE applies to the WordPress plugin contact-form-to-db,

CVE-2017-18492

The contact-form-to-db plugin before 1.5.7 for WordPress has multiple XSS issues...

CVE-2018-20963

CVE-2018-20963 affects the WordPress plugin contact-form-to-email , versions prior to 1.2.66. The vulnerability is a cross-site scripting (XSS) flaw caused by insufficient validation of client-side data in the plugin, enabling an attacker to execute arbitrary script in a victim’s browser. Public ...

CVE-2018-20963

The contact-form-to-email plugin before 1.2.66 for WordPress has XSS...

CVE-2018-20964

CVE-2018-20964 affects the WordPress plugin contact-form-to-email, versions prior to 1.2.66. Root cause: CSRF in the plugin. Impact per CVSS: HIGH (CVSS‑3.0 base 8.8; CVSS‑2.0 base 6.8). Remediation: upgrade to version 1.2.66 or later to mitigate the vulnerability.

CVE-2018-20964

The contact-form-to-email plugin before 1.2.66 for WordPress has CSRF...

WordPress CP Contact Form with PayPal Plugin Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.CP Contact Form with PayPal is a Paypal payment form plugin used in it. A cross-site scripting vulnerability exists in the Publishing...

CVE-2019-14785

The "CP Contact Form with PayPal" plugin before 1.2.99 for WordPress has XSS in the publishing wizard via the wp-admin/admin.php?page=cpcontactformpaypal.php&pwizard=1 cpcontactformppid parameter...

CVE-2019-14785

The "CP Contact Form with PayPal" plugin before 1.2.99 for WordPress has XSS in the publishing wizard via the wp-admin/admin.php?page=cpcontactformpaypal.php&pwizard=1 cpcontactformppid parameter...

WordPress Advanced Contact form 7 DB Plugin < 1.6.2 SQL Injection Vulnerability

The WordPress plugin Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

WordPress Contact Form & SMTP by PirateForms plugin <= 1.5.1 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found by Jerome Bruandet in WordPress Contact Form & SMTP by PirateForms plugin versions = 1.5.1. Solution Update the WordPress Contact Form & SMTP by PirateForms plugin to the latest available version at least 1.5.2...