4947 matches found
CVE-2019-11557
The WebDorado Contact Form Builder plugin before 1.0.69 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with resultant local file inclusion via directory traversal, because there can be a discrepancy between the $POST'action' value and the $GET'action' value, and the...
PT-2019-12378 · Webdorado · Webdorado Contact Form Builder
Name of the Vulnerable Software and Affected Versions: WebDorado Contact Form Builder plugin versions prior to 1.0.69 Description: The issue allows for CSRF via the "wp-admin/admin-ajax.php" API endpoint, specifically through the action parameter, which can lead to local file inclusion via...
WordPress Contact Form Builder plugin <= 1.0.68 - Cross-Site Request Forgery (CSRF) leading to Local File Inclusion (LFI) vulnerability
Cross-Site Request Forgery CSRF leading to Local File Inclusion LFI vulnerability found by Panagiotis Vagenas in WordPress Contact Form Builder plugin versions = 1.0.68. Solution Update the WordPress Contact Form Builder plugin to the latest available version at least 1.0.69...
Contact Form Builder <= 1.0.68 - CSRF to LFI
The WDContactFormBuilder WordPress plugin was affected by a CSRF to LFI security vulnerability...
WordPress Plugin Contact Form Builder 1.0.67 - Cross-Site Request Forgery Local File Inclusion
WordPress Plugin Contact Form Builder 1.0.67 - Cross-Site Request Forgery Local File Inclusion Exploit Title: Contact Form Builder CSRF → LFI Date: 2019-03-17 Exploit Author: Panagiotis Vagenas Vendor Homepage: http://web-dorado.com/ Software Link: https://wordpress.org/plugins/contact-form-build...
WordPress Contact Form Builder 1.0.67 Plugin - CSRF / Local File Inclusion Exploit
Exploit for php platform in category web applications Exploit Title: Contact Form Builder CSRF → LFI Date: 2019-03-17 Exploit Author: Panagiotis Vagenas Vendor Homepage: http://web-dorado.com/ Software Link: https://wordpress.org/plugins/contact-form-builder Version: 1.0.67 Tested on: WordPress...
WordPress Plugin Contact Form Builder 1.0.67 - Cross-Site Request Forgery / Local File Inclusion
Exploit Title: Contact Form Builder CSRF → LFI Date: 2019-03-17 Exploit Author: Panagiotis Vagenas Vendor Homepage: http://web-dorado.com/ Software Link: https://wordpress.org/plugins/contact-form-builder Version: 1.0.67 Tested on: WordPress 5.1.1 Description ----------- Plugin implements the...
WordPress Advanced Contact form 7 DB plugin <= 1.6.0 - Authenticated SQL Injection (SQLi) vulnerability
Authenticated SQL Injection SQLi vulnerability found by Sucuri in WordPress Advanced Contact form 7 DB plugin versions = 1.6.0. Solution Update the WordPress Advanced Contact form 7 DB plugin to the latest available version at least 1.6.1...
Advanced Contact form 7 DB <= 1.6.0 - Authenticated SQL Injection
The Advanced Contact form 7 DB WordPress plugin was affected by an Authenticated SQL Injection security vulnerability...
WordPress Contact Form by WD plugin <= 1.13.4 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability found by Panagiotis Vagenas in WordPress Contact Form by WD plugin versions = 1.13.4. Solution Update the WordPress Contact Form by WD plugin to the latest available version at least 1.13.5...
WordPress Plugin Contact Form Maker Cross-Site Request Forgery Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in the WordPress plugin Contact Form Maker. An attacker can perform a CSRF...
WordPress Contact Form Maker 1.13.1 Cross Site Request Forgery Vulnerability
Exploit for php platform in category web applications Exploit Title: Contact Form by WD CSRF → LFI Exploit Author: Panagiotis Vagenas Vendor Homepage: http://web-dorado.com/ Software Link: https://wordpress.org/plugins/contact-form-maker Version: 1.13.1 Tested on: WordPress 5.1.1 Description...
Contact Form by WD <= 1.13.4 - Cross-Site Request Forgery to LFI
Plugin Contact Form by WD suffers from CSRF issues that could lead to an LFI attack...
WordPress Plugin Contact Form Maker 1.13.1 - Cross-Site Request Forgery
WordPress Plugin Contact Form Maker 1.13.1 - Cross-Site Request Forgery Exploit Title: Contact Form by WD CSRF → LFI Date: 2019-03-17 Exploit Author: Panagiotis Vagenas Vendor Homepage: http://web-dorado.com/ Software Link: https://wordpress.org/plugins/contact-form-maker Version: 1.13.1 Tested o...
WordPress Plugin Contact Form Maker 1.13.1 - Cross-Site Request Forgery
Exploit Title: Contact Form by WD CSRF → LFI Date: 2019-03-17 Exploit Author: Panagiotis Vagenas Vendor Homepage: http://web-dorado.com/ Software Link: https://wordpress.org/plugins/contact-form-maker Version: 1.13.1 Tested on: WordPress 5.1.1 Description ----------- Plugin implements the followi...
WordPress Contact Form Maker 1.13.1 Cross Site Request Forgery
Exploit Title: Contact Form by WD CSRF → LFI Date: 2019-03-17 Exploit Author: Panagiotis Vagenas Vendor Homepage: http://web-dorado.com/ Software Link: https://wordpress.org/plugins/contact-form-maker Version: 1.13.1 Tested on: WordPress 5.1.1 Description ----------- Plugin implements the followi...
WordPress Contact Form Email Plugin < 1.2.66 XSS Vulnerability
The WordPress plugin Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...
WordPress Contact Form Email Plugin Cross-Site Scripting Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Contact Form Email plugin is used in one of the email management plugin. A cross-site scripting vulnerability exists in the...
WordPress Contact Form Email plugin <= 1.2.65 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability found by Tim Coen in WordPress Contact Form Email plugin versions = 1.2.65. Solution Update the WordPress Contact Form Email plugin to the latest available version at least 1.2.66...
