CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Rapid7 Vulnerability Database (full)•added 2019/08/09 12:00 a.m.•3 views

CVE-2019-14785: Improper Neutralization of Input During Web Page Generation

The "CP Contact Form with PayPal" plugin before 1.2.99 for WordPress has XSS in the publishing wizard via the wp-admin/admin.php?page=cpcontactformpaypal.php&pwizard=1 cpcontactformppid parameter...

5.4CVSS5.8AI score0.00797EPSS

SaveExploits2References2

Prion•added 2017/09/30 1:29 a.m.•16 views

Sql injection

The cp-contact-form-with-paypal aka CP Contact Form with PayPal plugin before 1.1.6 for WordPress has SQL injection via the cpcontactformppid parameter to cpcontactformpp.php...

6.5CVSS8.3AI score0.02024EPSS

SaveExploits0References3Affected Software1

Rapid7 Vulnerability Database (full)•added 2017/09/30 12:00 a.m.•4 views

CVE-2015-9234: Improper Neutralization of Special Elements used in an SQL Command

The cp-contact-form-with-paypal aka CP Contact Form with PayPal plugin before 1.1.6 for WordPress has SQL injection via the cpcontactformppid parameter to cpcontactformpp.php...

7.2CVSS7.1AI score0.02024EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by