CVE-2018-20963: Improper Neutralization of Input During Web Page Generation

The contact-form-to-email plugin before 1.2.66 for WordPress has XSS...

PT-2019-10399

Name of the Vulnerable Software and Affected Versions contact-form-to-email plugin versions prior to 1.2.66 Description The issue is related to a cross-site scripting XSS problem. Recommendations For versions prior to 1.2.66, update to version 1.2.66 or later to resolve the issue...

CVE-2016-10869: Improper Neutralization of Input During Web Page Generation

The contact-form-plugin plugin before 4.0.2 for WordPress has XSS...

PT-2019-7665

Name of the Vulnerable Software and Affected Versions contact-form-plugin versions prior to 4.0.2 Description The issue affects the contact-form-plugin plugin for WordPress, allowing for cross-site scripting XSS attacks. Recommendations For versions prior to 4.0.2, update to version 4.0.2 or late...

PT-2019-8426

Name of the Vulnerable Software and Affected Versions contact-form-plugin versions prior to 4.0.6 Description The issue is related to multiple XSS problems. Recommendations For versions prior to 4.0.6, update to version 4.0.6 or later to resolve the issue...

CVE-2018-20964: Cross-Site Request Forgery (CSRF)

The contact-form-to-email plugin before 1.2.66 for WordPress has CSRF...

CVE-2019-14785

The "CP Contact Form with PayPal" plugin before 1.2.99 for WordPress has XSS in the publishing wizard via the wp-admin/admin.php?page=cpcontactformpaypal.php&pwizard=1 cpcontactformppid parameter...

CVE-2019-14785

The "CP Contact Form with PayPal" plugin before 1.2.99 for WordPress has XSS in the publishing wizard via the wp-admin/admin.php?page=cpcontactformpaypal.php&pwizard=1 cpcontactformppid parameter...

CVE-2019-14785

The "CP Contact Form with PayPal" plugin before 1.2.99 for WordPress has XSS in the publishing wizard via the wp-admin/admin.php?page=cpcontactformpaypal.php&pwizard=1 cpcontactformppid parameter...

CVE-2019-14785: Improper Neutralization of Input During Web Page Generation

The "CP Contact Form with PayPal" plugin before 1.2.99 for WordPress has XSS in the publishing wizard via the wp-admin/admin.php?page=cpcontactformpaypal.php&pwizard=1 cpcontactformppid parameter...

PT-2019-13830

Name of the Vulnerable Software and Affected Versions CP Contact Form with PayPal plugin versions prior to 1.2.99 Description The issue concerns a Cross-Site Scripting XSS flaw in the publishing wizard of the plugin. This is accessible via the "wp-admin/admin.php?page=cp contact form...

WordPress Advanced Contact form 7 DB Plugin < 1.6.2 SQL Injection Vulnerability

The WordPress plugin Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

WordPress Contact Form & SMTP by PirateForms plugin <= 1.5.1 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found by Jerome Bruandet in WordPress Contact Form & SMTP by PirateForms plugin versions = 1.5.1. Solution Update the WordPress Contact Form & SMTP by PirateForms plugin to the latest available version at least 1.5.2...

WordPress Contact Form & SMTP by PirateForms plugin <= 1.5.1 - HTML Injection vulnerability

HTML Injection vulnerability found by Jerome Bruandet in WordPress Contact Form & SMTP by PirateForms plugin versions = 1.5.1. Solution Update the WordPress Contact Form & SMTP by PirateForms plugin to the latest available version at least 1.5.2...

PT-2019-13431 · Vsourz Digital · Vsourz Digital Advanced Cf7 Db Plugin

Name of the Vulnerable Software and Affected Versions: Vsourz Digital Advanced CF7 DB plugin versions prior to 1.6.2 Description: A SQL injection issue exists, allowing a remote attacker to execute arbitrary SQL commands on the affected system. Recommendations: For Vsourz Digital Advanced CF7 DB...

Pirate Forms < 2.5.2 - HTML Injection & CSRF

The Contact Form & SMTP Plugin for WordPress by PirateForms WordPress plugin was affected by a HTML Injection & CSRF security vulnerability...

WordPress Contact Form 7 Dynamic Text Extension plugin <= 2.0.2.1 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability found in WordPress Contact Form 7 Dynamic Text Extension plugin versions = 2.0.2.1. Solution Update the WordPress Contact Form 7 Dynamic Text Extension plugin to the latest available version at least 2.0.3...

WordPress Advanced Contact form 7 DB plugin <= 1.6.1 - SQL Injection (SQLi) vulnerability

SQL Injection SQLi vulnerability found by Tin Duong in WordPress Advanced Contact form 7 DB plugin versions = 1.6.1. Solution Update the WordPress Advanced Contact form 7 DB plugin to the latest available version at least 1.7.1...

Contact Form 7 Dynamic Text Extension <= 2.0.2.1 - Reflected XSS

The contact-form-7-dynamic-text-extensio WordPress plugin was affected by a Reflected XSS security vulnerability...

WordPress Advance Contact Form Plugin SQL Injection

An SQL injection vulnerability exists in WordPress Advance Contact Form Plugin. Successful exploitation of this vulnerability could lead to disclosure of database credentials...