Lucene search
+L

10 matches found

Cvelist
Cvelist
•added 2026/10/06 8:34 a.m.•25 views

CVE-2026-39731 WordPress Database for CF7 plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Database for CF7 = 1.2.6 versions...

7.1CVSS0.00237EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/06 8:34 a.m.•8 views

CVE-2026-39731

The Database for CF7 WordPress plugin versions

7.1CVSS5.8AI score0.00237EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/06 8:34 a.m.•6 views

EUVD-2026-93253

Unauthenticated Cross Site Scripting XSS in Database for CF7 = 1.2.6 versions...

7.1CVSS5.8AI score0.00237EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/06 8:34 a.m.•6 views

CVE-2026-39731 WordPress Database for CF7 plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Database for CF7 = 1.2.6 versions...

7.1CVSS5.8AI score0.00237EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•5 views

PT-2026-106418

Unauthenticated Cross Site Scripting XSS in Database for CF7 = 1.2.6 versions...

7.1CVSS5.8AI score0.00237EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/10/05 1:22 p.m.•5 views

WordPress Database for CF7 plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by ParkHyunWoo in WordPress Plugin Database for CF7 versions = 1.2.6...

7.1CVSS5.8AI score0.00237EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/29 12:00 a.m.•2 views

CVE-2026-13425: Improper Neutralization of Input During Web Page Generation

The Database for CF7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Array Form Field Values in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

7.2CVSS6AI score0.00426EPSS
SaveExploits0References2
NVD
NVD
•added 2024/12/09 1:15 p.m.•26 views

CVE-2023-49167

Missing Authorization vulnerability in code4life Database for CF7 database-for-cf7 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Database for CF7: from n/a through = 1.2.4...

6.5CVSS0.00632EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•8 views

CVE-2023-49167: Missing Authorization

Missing Authorization vulnerability in code4life Database for CF7 database-for-cf7 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Database for CF7: from n/a through = 1.2.4...

6.5CVSS5.9AI score0.00632EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•12 views

WordPress plugin Database for CF7 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.5CVSS8.7AI score0.00632EPSS
SaveExploits0References1
Rows per page
Query Builder