CVE-2024-6568

The Flamix: Bitrix24 and Contact Form 7 integrations plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.1.0. This is due the plugin utilizing mobiledetect without preventing direct access to the files. This makes it possible for unauthenticated...

CVE-2024-6568: Exposure of Sensitive Information to an Unauthorized Actor

The Flamix: Bitrix24 and Contact Form 7 integrations plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.1.0. This is due the plugin utilizing mobiledetect without preventing direct access to the files. This makes it possible for unauthenticated...

CVE-2014-6445

Multiple cross-site scripting XSS vulnerabilities in includes/toAdmin.php in Contact Form 7 Integrations plugin 1.0 through 1.3.10 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 uE or 2 uC parameter...

CVE-2014-6445

Multiple cross-site scripting XSS vulnerabilities in includes/toAdmin.php in Contact Form 7 Integrations plugin 1.0 through 1.3.10 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 uE or 2 uC parameter...

CVE-2014-6445

CVE-2014-6445 concerns the WordPress plugin Contact Form 7 Integrations (includes/toAdmin.php) with multiple XSS vulnerabilities in versions 1.0–1.3.10. The flaws allow remote attackers to inject arbitrary script/HTML via the uE or uC parameters. Public references (NVD, WPVulndb, OpenVAS entries,...

PT-2014-7221

Name of the Vulnerable Software and Affected Versions Contact Form 7 Integrations plugin versions 1.0 through 1.3.10 Description The issue allows remote attackers to inject arbitrary web script or HTML via the uE or uC parameters in the includes/toAdmin.php file. This can lead to cross-site...

CVE-2014-6445: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in includes/toAdmin.php in Contact Form 7 Integrations plugin 1.0 through 1.3.10 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 uE or 2 uC parameter...