Lucene search
+L

4 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 7:20 p.m.10 views

CVE-2021-24125

Unvalidated input in the Contact Form Submissions WordPress plugin before 1.7.1, could lead to SQL injection in the wpcf7contactform GET parameter when submitting a filter request as a high privilege user admin+...

7.2CVSS7.6AI score0.01456EPSS
SaveExploits2References1
ATTACKERKB
ATTACKERKB
added 2021/03/18 3:15 p.m.2 views

CVE-2021-24125

Unvalidated input in the Contact Form Submissions WordPress plugin before 1.7.1, could lead to SQL injection in the wpcf7contactform GET parameter when submitting a filter request as a high privilege user admin+...

7.2CVSS7.1AI score0.01456EPSS
SaveExploits2References2
CVE
CVE
added 2021/03/18 2:57 p.m.61 views

CVE-2021-24125

CVE-2021-24125 affects the WordPress plugin “Contact Form Submissions” for versions before 1.7.1. The issue is an input validation flaw in the wpcf7_contact_form GET parameter used during filter requests by a high-privilege user (admin+), leading to an SQL injection. Public records specify the vu...

7.2CVSS7.2AI score0.01456EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
added 2021/03/18 2:57 p.m.32 views

CVE-2021-24125 Contact Form Submissions < 1.7.1 - Authenticated SQL Injection

Unvalidated input in the Contact Form Submissions WordPress plugin before 1.7.1, could lead to SQL injection in the wpcf7contactform GET parameter when submitting a filter request as a high privilege user admin+...

7.5AI score0.01456EPSS
SaveExploits2References1
Rows per page
Query Builder