WordPress booking-calendar-contact-form plugin SQL injection vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress booking-calendar-contact-form plugin. An attacker can...

CVE-2018-20979

The contact-form-7 plugin before 5.0.4 for WordPress has privilege escalation because of capabilitytype mishandling in registerposttype...

CVE-2018-20979

The contact-form-7 plugin before 5.0.4 for WordPress has privilege escalation because of capabilitytype mishandling in registerposttype...

CVE-2013-7481

The contact-form-plugin plugin before 3.3.5 for WordPress has XSS...

Privilege escalation

The contact-form-7 plugin before 5.0.4 for WordPress has privilege escalation because of capabilitytype mishandling in registerposttype...

Cross site scripting

The contact-form-plugin plugin before 3.3.5 for WordPress has XSS...

CVE-2013-7481

The contact-form-plugin plugin before 3.3.5 for WordPress has XSS...

CVE-2013-7481

The contact-form-plugin plugin before 3.3.5 for WordPress has XSS...

CVE-2013-7481

CVE-2013-7481 is a cross-site scripting (XSS) vulnerability in the WordPress plugin contact-form-plugin, affecting versions before 3.3.5. The issue resides in the plugin’s contact_form.php, enabling an attacker to inject script. Remediation: upgrade to version 3.3.5 or later. Other connected sour...

CVE-2018-20979

The contact-form-7 plugin before 5.0.4 for WordPress has privilege escalation because of capabilitytype mishandling in registerposttype...

CVE-2018-20979

The CVE-2018-20979 entry concerns the Contact Form 7 WordPress plugin (before 5.0.4). The vulnerability stems from capability_type mishandling in register_post_type, enabling privilege escalation. Affected component is the plugin’s post type registration logic; the root cause is improper handling...

CVE-2018-20979

The contact-form-7 plugin before 5.0.4 for WordPress has privilege escalation because of capabilitytype mishandling in registerposttype...

CVE-2013-7481: Improper Neutralization of Input During Web Page Generation

The contact-form-plugin plugin before 3.3.5 for WordPress has XSS...

PT-2019-7030

Name of the Vulnerable Software and Affected Versions contact-form-plugin plugin versions prior to 3.3.5 for WordPress Description The issue is related to a cross-site scripting XSS problem. There is no information provided about the estimated number of potentially affected devices worldwide or...

CVE-2018-20979: Undefined Security Weakness

The contact-form-7 plugin before 5.0.4 for WordPress has privilege escalation because of capabilitytype mishandling in registerposttype...

PT-2019-10415

Name of the Vulnerable Software and Affected Versions contact-form-7 plugin versions prior to 5.0.4 Description The issue is related to privilege escalation due to capability type mishandling in the register post type function. Recommendations For versions prior to 5.0.4, update to version 5.0.4 ...

CVE-2016-10909

The booking-calendar-contact-form plugin before 1.0.24 for WordPress has SQL injection...

Sql injection

The booking-calendar-contact-form plugin before 1.0.24 for WordPress has SQL injection...

CVE-2016-10909

The CVE-2016-10909 entry concerns the WordPress Booking Calendar Contact Form plugin prior to 1.0.24, which is vulnerable to SQL Injection due to an input handling flaw in that plugin version. The issue is documented consistently across multiple sources (NVD, Red Hat, CVE registries, CNVD, PRION,...

CVE-2016-10908

CVE-2016-10908 describes a cross-site scripting (XSS) vulnerability in the WordPress plugin booking-calendar-contact-form when using versions before 1.0.24. The issue is a vulnerability in the plugin's handling of input/output that could allow an attacker to inject client-side code. The affected ...