Lucene search
+L

4 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 7:20 p.m.•21 views

CVE-2021-24125

Unvalidated input in the Contact Form Submissions WordPress plugin before 1.7.1, could lead to SQL injection in the wpcf7contactform GET parameter when submitting a filter request as a high privilege user admin+...

7.2CVSS7.6AI score0.01456EPSS
SaveExploits2References1
attackerkb
attackerkb
•added 2021/03/18 3:15 p.m.•7 views

CVE-2021-24125

Unvalidated input in the Contact Form Submissions WordPress plugin before 1.7.1, could lead to SQL injection in the wpcf7contactform GET parameter when submitting a filter request as a high privilege user admin+...

7.2CVSS7.1AI score0.01456EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2021/03/18 2:57 p.m.•46 views

CVE-2021-24125 Contact Form Submissions < 1.7.1 - Authenticated SQL Injection

Unvalidated input in the Contact Form Submissions WordPress plugin before 1.7.1, could lead to SQL injection in the wpcf7contactform GET parameter when submitting a filter request as a high privilege user admin+...

7.5AI score0.01456EPSS
SaveExploits2References1
CVE
CVE
•added 2021/03/18 2:57 p.m.•78 views

CVE-2021-24125

CVE-2021-24125 affects the WordPress plugin “Contact Form Submissions” for versions before 1.7.1. The issue is an input validation flaw in the wpcf7_contact_form GET parameter used during filter requests by a high-privilege user (admin+), leading to an SQL injection. Public records specify the vu...

7.2CVSS7.2AI score0.01456EPSS
SaveExploits2References1Affected Software1
Rows per page
Query Builder