Lucene search
K

182 matches found

Cvelist
Cvelist
added 2026/01/17 2:22 a.m.28 views

CVE-2025-12718 Quick Contact Form <= 8.2.6 - Unauthenticated Open Mail Relay

The Quick Contact Form plugin for WordPress is vulnerable to Open Mail Relay in all versions up to, and including, 8.2.6. This is due to the 'qcfvalidateform' AJAX endpoint allowing a user controlled parameter to set the 'from' email address. This makes it possible for unauthenticated attackers t...

5.8CVSS0.00206EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/01/17 12:0 a.m.15 views

PT-2026-3337

The Quick Contact Form plugin for WordPress is vulnerable to Open Mail Relay in all versions up to, and including, 8.2.6. This is due to the 'qcf validate form' AJAX endpoint allowing a user controlled parameter to set the 'from' email address. This makes it possible for unauthenticated attackers...

5.8CVSS5.9AI score0.00206EPSS
Exploits0References3
Patchstack
Patchstack
added 2026/01/15 11:5 p.m.13 views

WordPress Kalium plugin <= 3.29 - Missing Authorization to Unauthenticated Mail Relay via kalium_vc_contact_form_request vulnerability

Missing Authorization to Unauthenticated Mail Relay via kaliumvccontactformrequest vulnerability discovered by Ahmed Rayen Ayari in WordPress Theme Kalium versions = 3.29...

5.3CVSS7AI score0.00227EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2026/01/15 2:16 p.m.29 views

CVE-2025-12895

The Kalium 3 | Creative WordPress & WooCommerce Theme theme for WordPress is vulnerable to unauthorized email sending due to a missing capability check on the kaliumvccontactformrequest function in all versions up to, and including, 3.29. This makes it possible for unauthenticated attackers to us...

5.3CVSS0.00227EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/01/15 1:23 p.m.5 views

CVE-2025-12895

The Kalium 3 | Creative WordPress & WooCommerce Theme theme for WordPress is vulnerable to unauthorized email sending due to a missing capability check on the kaliumvccontactformrequest function in all versions up to, and including, 3.29. This makes it possible for unauthenticated attackers to us...

5.3CVSS5.7AI score0.00227EPSS
Exploits0References4
EUVD
EUVD
added 2026/01/15 1:23 p.m.8 views

EUVD-2026-2816

The Kalium 3 | Creative WordPress & WooCommerce Theme theme for WordPress is vulnerable to unauthorized email sending due to a missing capability check on the kaliumvccontactformrequest function in all versions up to, and including, 3.29. This makes it possible for unauthenticated attackers to us...

5.3CVSS5.1AI score0.00227EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/01/15 1:23 p.m.5 views

CVE-2025-12895 Kalium <= 3.29 - Missing Authorization to Unauthenticated Mail Relay via kalium_vc_contact_form_request

The Kalium 3 | Creative WordPress & WooCommerce Theme theme for WordPress is vulnerable to unauthorized email sending due to a missing capability check on the kaliumvccontactformrequest function in all versions up to, and including, 3.29. This makes it possible for unauthenticated attackers to us...

5.3CVSS5.2AI score0.00227EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/01/15 1:23 p.m.30 views

CVE-2025-12895 Kalium <= 3.29 - Missing Authorization to Unauthenticated Mail Relay via kalium_vc_contact_form_request

The Kalium 3 | Creative WordPress & WooCommerce Theme theme for WordPress is vulnerable to unauthorized email sending due to a missing capability check on the kaliumvccontactformrequest function in all versions up to, and including, 3.29. This makes it possible for unauthenticated attackers to us...

5.3CVSS0.00227EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/01/15 12:0 a.m.19 views

PT-2026-3002

The Kalium 3 | Creative WordPress & WooCommerce Theme theme for WordPress is vulnerable to unauthorized email sending due to a missing capability check on the kalium vc contact form request function in all versions up to, and including, 3.29. This makes it possible for unauthenticated attackers t...

5.3CVSS5.6AI score0.00227EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2002-1262

Malware in sbrugna...

7.5CVSS4.7AI score0.02453EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2005-2855

Malware in sbrugna...

5CVSS6.4AI score0.01069EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2019-5609

Malware in sbrugna...

4.3CVSS4.8AI score0.0069EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2005-2858

Malware in sbrugna...

7.5CVSS4.8AI score0.02601EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2020-0402

Malware in sbrugna...

10CVSS8.9AI score0.01472EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2004-0831

Malware in sbrugna...

7.5CVSS6.1AI score0.02507EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2000-0606

Malware in sbrugna...

5CVSS6.4AI score0.016EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2005-0432

Malware in sbrugna...

7.5CVSS4.8AI score0.01283EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2008-2777

Malware in sbrugna...

6.4CVSS6.3AI score0.01359EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.25 views

EUVD-2021-24603

Malware in sbrugna...

6.5CVSS6.5AI score0.00857EPSS
Exploits2References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-1999-0510

Malware in sbrugna...

10CVSS4.6AI score0.12035EPSS
Exploits0References2
Rows per page
Query Builder