33380 matches found
CVE-2026-14872
The Database for Contact Form 7, WPforms, Elementor forms WordPress plugin (versions before 1.5.5 ) is vulnerable to SQL Injection due to improper sanitization and escaping of the id parameter within SQL statements. This flaw is exploitable by authenticated users who possess specific capabilities...
CVE-2026-14872 Database for Contact Form 7, WPforms, Elementor forms < 1.5.5 - Authenticated SQL Injection via id Parameter
The Database for Contact Form 7, WPforms, Elementor forms WordPress plugin before 1.5.5 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL Injection exploitable by users granted a specific capability which is limited to administrators by default...
CVE-2026-14872
The Database for Contact Form 7, WPforms, Elementor forms WordPress plugin before 1.5.5 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL Injection exploitable by users granted a specific capability which is limited to administrators by default...
Exploit for Improper Input Validation in Google Chrome
--- CVE-2026-11113 – SMTP Header Injection in Contact Form...
PT-2026-75054
TuxCare rebuilt form-data to address 1 CVE. Fixed in 4.0.1-tuxcare.1...
PT-2026-73938
TuxCare rebuilt form-data to address 2 CVEs. Fixed in 1.0.0-rc3-tuxcare.1...
PT-2026-74677
TuxCare rebuilt form-data to address 1 CVE. Fixed in 1.0.1-tuxcare.1...
PT-2026-74189
TuxCare rebuilt form-data to address 1 CVE. Fixed in 0.1.4-tuxcare.1...
PT-2026-75738
TuxCare rebuilt form-data to address 1 CVE. Fixed in 2.3.3-tuxcare.5...
PT-2026-74188
TuxCare rebuilt form-data to address 1 CVE. Fixed in 2.3.3-tuxcare.1...
PT-2026-75757
TuxCare rebuilt form-data to address 1 CVE. Fixed in 1.0.1-tuxcare.2...
PT-2026-75758
TuxCare rebuilt form-data to address 1 CVE. Fixed in 2.0.0-tuxcare.2...
PT-2026-74181
TuxCare rebuilt form-data to address 1 CVE. Fixed in 0.0.8-tuxcare.1...
PT-2026-67650
The Database for Contact Form 7, WPforms, Elementor forms WordPress plugin before 1.5.5 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL Injection exploitable by users granted a specific capability which is limited to administrators by default...
PT-2026-75756
TuxCare rebuilt form-data to address 1 CVE. Fixed in 0.2.0-tuxcare.2...
PT-2026-75755
TuxCare rebuilt form-data to address 1 CVE. Fixed in 0.1.4-tuxcare.2...
PT-2026-75754
TuxCare rebuilt form-data to address 1 CVE. Fixed in 0.0.8-tuxcare.2...
PT-2026-75742
TuxCare rebuilt form-data to address 1 CVE. Fixed in 2.1.4-tuxcare.2...