4 matches found
CVE-2021-24125
Unvalidated input in the Contact Form Submissions WordPress plugin before 1.7.1, could lead to SQL injection in the wpcf7contactform GET parameter when submitting a filter request as a high privilege user admin+...
CVE-2021-24125
Unvalidated input in the Contact Form Submissions WordPress plugin before 1.7.1, could lead to SQL injection in the wpcf7contactform GET parameter when submitting a filter request as a high privilege user admin+...
CVE-2021-24125
CVE-2021-24125 affects the WordPress plugin “Contact Form Submissions” for versions before 1.7.1. The issue is an input validation flaw in the wpcf7_contact_form GET parameter used during filter requests by a high-privilege user (admin+), leading to an SQL injection. Public records specify the vu...
CVE-2021-24125 Contact Form Submissions < 1.7.1 - Authenticated SQL Injection
Unvalidated input in the Contact Form Submissions WordPress plugin before 1.7.1, could lead to SQL injection in the wpcf7contactform GET parameter when submitting a filter request as a high privilege user admin+...