62 matches found
CVE-2024-56218 WordPress Contact Form 7 - Dynamic Text Extension plugin <= 5.0.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in AuRise Creative, SevenSpark Contact Form 7 Dynamic Text Extension allows Cross Site Request Forgery.This issue affects Contact Form 7 Dynamic Text Extension: from n/a through 5.0.1...
CVE-2024-56218
CVE-2024-56218 describes a Cross-Site Request Forgery (CSRF) vulnerability in Contact Form 7 Dynamic Text Extension (AuRise Creative, SevenSpark). The description states CSRF is possible in versions CF7 Dynamic Text Extension from n/a through 5.0.1. The connected documents confirm the issue type ...
PT-2024-36752 · WordPress · Contact Form 7 – Dynamic Text Extension
Name of the Vulnerable Software and Affected Versions: Contact Form 7 Dynamic Text Extension versions n/a through 5.0.1 Description: A Cross-Site Request Forgery CSRF issue affects the Contact Form 7 Dynamic Text Extension, allowing unauthorized requests. This can lead to Cross Site Request...
WordPress plugin Contact Form 7 Dynamic Text Extension 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in...
WordPress Contact Form 7 - Dynamic Text Extension plugin <= 5.0.1 - Cross Site Request Forgery (CSRF) vulnerability
WordPress Contact Form 7 - Dynamic Text Extension plugin = 5.0.1 - Cross Site Request Forgery CSRF vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Contact Form 7 – Dynamic Text Extension versions = 5.0.1...
CVE-2024-10084
The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to Basic Information Disclosure in all versions up to, and including, 4.5 via the CF7getpostvar shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract the...
CVE-2024-10084
The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to Basic Information Disclosure in all versions up to, and including, 4.5 via the CF7getpostvar shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract the...
WordPress Contact Form 7 – Dynamic Text Extension plugin <= 4.5 - Information Disclosure via Shortcode vulnerability
Information Disclosure via Shortcode vulnerability discovered by Francesco Carlucci in WordPress Plugin Contact Form 7 – Dynamic Text Extension versions = 4.5...
PT-2024-16017 · WordPress · Contact Form 7 – Dynamic Text Extension
Name of the Vulnerable Software and Affected Versions: Contact Form 7 – Dynamic Text Extension plugin for WordPress versions prior to 4.5.0 Description: The Contact Form 7 – Dynamic Text Extension plugin for WordPress has a Basic Information Disclosure issue. This makes it possible for...
WordPress plugin Contact Form 7 – Dynamic Text Extension 信息泄露漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An information disclosure vulnerability exist...
WordPress Contact Form 7 Dynamic Text Extension Plugin <= 4.5 is vulnerable to Sensitive Data Exposure
Software Contact Form 7 Dynamic Text Extension Type Plugin Vulnerable versions = 4.5 Fixed in 4.5.1 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-10084 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 4a8f9f7ebcd8 Credits...
CVE-2023-6630
The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.1.0 via the CF7getcustomfield and CF7getcurrentuser shortcodes due to missing validation on a user controlled key. This makes it possible for...
CVE-2023-6630
The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.1.0 via the CF7getcustomfield and CF7getcurrentuser shortcodes due to missing validation on a user controlled key. This makes it possible for...
CVE-2023-6630
CVE-2023-6630 : The WordPress plugin “Contact Form 7 – Dynamic Text Extension” ( 4.1.0); PatchStack lists 4.2.0 as the fix. Other sources corroborate the vulnerability and describe it as a broken access control issue with low overall CVSS (4.3). Actionable takeaway: apply the patch to affected in...
PT-2024-15032 · WordPress · Contact Form 7 – Dynamic Text Extension
Name of the Vulnerable Software and Affected Versions: Contact Form 7 – Dynamic Text Extension plugin for WordPress versions up to, and including, 4.1.0 Description: The issue allows authenticated attackers with contributor access or higher to access arbitrary metadata of any post type, referenci...
WordPress Contact Form 7 Dynamic Text Extension Plugin <= 4.1.0 is vulnerable to Broken Access Control
Software Contact Form 7 Dynamic Text Extension Type Plugin Vulnerable versions = 4.1.0 Fixed in 4.2.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-6630 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID e817a16730df Credits Francesc...
WordPress Contact Form 7 Dynamic Text Extension Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)
Software Contact Form 7 Dynamic Text Extension Type Plugin Vulnerable versions = 2.0.3 Fixed in 3.0.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE N/A Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 64fbad36bbc4 Credits Unknow...
GHSA-5QXQ-VGMM-Q39M RCE vulnerability in Pimcore/Mail & Dynamic Text Layout
Impact The user controlled twig templates rendering in Pimcore/Mail & ClassDefinition\Layout\Text is vulnerable to server-side template Injection RCE. Patches Update to version 10.5.9 or apply this patch manually https://github.com/pimcore/pimcore/pull/13347.patch Workarounds Apply...
RCE vulnerability in Pimcore/Mail & Dynamic Text Layout
Impact The user controlled twig templates rendering in Pimcore/Mail & ClassDefinition\Layout\Text is vulnerable to server-side template Injection RCE. Patches Update to version 10.5.9 or apply this patch manually https://github.com/pimcore/pimcore/pull/13347.patch Workarounds Apply...
