2 matches found
CVE-2025-60081: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in add-ons.org PDF for Contact Form 7 pdf-for-contact-form-7 allows Object Injection.This issue affects PDF for Contact Form 7: from n/a through = 6.5.0...
8.8CVSS5.8AI score0.00431EPSS
SaveExploits0References1
CVE-2024-3585
The Send PDF for Contact Form 7 plugin for WordPress is vulnerable to unauthorized access of form submissions due to a missing capability check on the hooks function in all versions up to, and including, 1.0.2.3. This makes it possible for unauthenticated attackers to download information about...
5.3CVSS5AI score0.00691EPSS
SaveExploits0References3
20