Lucene search
+L

19 matches found

RedhatCVE
RedhatCVE
•added 2025/11/07 5:33 p.m.•23 views

CVE-2025-60197

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in owenr88 Simple Contact Forms simple-contact-forms allows PHP Local File Inclusion.This issue affects Simple Contact Forms: from n/a through = 1.6.4...

8.1CVSS5.8AI score0.00434EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/11/06 6:32 p.m.•20 views

EUVD-2025-38118

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in owenr88 Simple Contact Forms simple-contact-forms allows PHP Local File Inclusion.This issue affects Simple Contact Forms: from n/a through = 1.6.4...

8.2CVSS6.6AI score0.00434EPSS
SaveExploits0References2
NVD
NVD
•added 2025/11/06 4:16 p.m.•17 views

CVE-2025-60197

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in owenr88 Simple Contact Forms simple-contact-forms allows PHP Local File Inclusion.This issue affects Simple Contact Forms: from n/a through = 1.6.4...

8.1CVSS0.00434EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/11/06 3:54 p.m.•13 views

CVE-2025-60197 WordPress Simple Contact Forms plugin <= 1.6.4 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in owenr88 Simple Contact Forms simple-contact-forms allows PHP Local File Inclusion.This issue affects Simple Contact Forms: from n/a through = 1.6.4...

8.1CVSS5.8AI score0.00434EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/11/06 3:54 p.m.•28 views

CVE-2025-60197 WordPress Simple Contact Forms plugin <= 1.6.4 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in owenr88 Simple Contact Forms simple-contact-forms allows PHP Local File Inclusion.This issue affects Simple Contact Forms: from n/a through = 1.6.4...

8.1CVSS0.00434EPSS
SaveExploits0References1
CVE
CVE
•added 2025/11/06 3:54 p.m.•26 views

CVE-2025-60197

CVE-2025-60197 refers to a Local File Inclusion in the WordPress plugin Simple Contact Forms (owner: owenr88) version &lt;= 1.6.4, caused by improper control of the filename in include/require statements. Affected product/component: WordPress plugin Simple Contact Forms; vulnerability type: PHP L...

8.1CVSS5.8AI score0.00434EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/11/06 12:00 a.m.•22 views

PT-2025-45270

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in owenr88 Simple Contact Forms simple-contact-forms allows PHP Local File Inclusion.This issue affects Simple Contact Forms: from n/a through = 1.6.4...

8.2CVSS7.1AI score0.00434EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/06 12:00 a.m.•7 views

CVE-2025-60197: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in owenr88 Simple Contact Forms simple-contact-forms allows PHP Local File Inclusion.This issue affects Simple Contact Forms: from n/a through = 1.6.4...

8.1CVSS5.8AI score0.00434EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/11/06 12:00 a.m.•21 views

WordPress plugin Simple Contact Forms 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

8.1CVSS6.7AI score0.00434EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2025-8787

Malicious code in bioql PyPI...

7.1CVSS7.9AI score0.00237EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2025/07/22 9:02 a.m.•22 views

WordPress Simple Contact Forms plugin <= 1.6.4 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by LVT-tholv2k in WordPress Plugin Simple Contact Forms versions = 1.6.4...

8.2CVSS7AI score0.00434EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/04/02 1:29 p.m.•26 views

CVE-2025-31615

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in owenr88 Simple Contact Forms simple-contact-forms allows Stored XSS.This issue affects Simple Contact Forms: from n/a through = 1.6.4...

7.1CVSS7.2AI score0.00237EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/03/31 2:08 p.m.•16 views

WordPress Simple Contact Forms plugin <= 1.6.4 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin Simple Contact Forms versions = 1.6.4...

7.1CVSS6.2AI score0.00237EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2025/03/31 1:15 p.m.•34 views

CVE-2025-31615

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in owenr88 Simple Contact Forms simple-contact-forms allows Stored XSS.This issue affects Simple Contact Forms: from n/a through = 1.6.4...

7.1CVSS0.00237EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/31 12:55 p.m.•8 views

CVE-2025-31615 WordPress Simple Contact Forms plugin <= 1.6.4 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in owenr88 Simple Contact Forms allows Stored XSS. This issue affects Simple Contact Forms: from n/a through 1.6.4...

7.1CVSS6.7AI score0.00237EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/31 12:55 p.m.•31 views

CVE-2025-31615 WordPress Simple Contact Forms plugin <= 1.6.4 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in owenr88 Simple Contact Forms simple-contact-forms allows Stored XSS.This issue affects Simple Contact Forms: from n/a through = 1.6.4...

7.1CVSS0.00237EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/31 12:00 a.m.•4 views

CVE-2025-31615: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in owenr88 Simple Contact Forms simple-contact-forms allows Stored XSS.This issue affects Simple Contact Forms: from n/a through = 1.6.4...

7.1CVSS5.8AI score0.00237EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/31 12:00 a.m.•19 views

WordPress plugin Simple Contact Forms 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

7.1CVSS7.6AI score0.00237EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/03/31 12:00 a.m.•3 views

PT-2025-13760

Name of the Vulnerable Software and Affected Versions owenr88 Simple Contact Forms versions 1.6.4 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables potential attackers ...

7.1CVSS0.00237EPSS
SaveExploits0References5
Rows per page
Query Builder