Lucene search
+L

23 matches found

Patchstack
Patchstack
•added 2026/04/03 7:00 a.m.•12 views

WordPress Spam Protect for Contact Form 7 plugin < 1.2.10 - Editor+ Remote Code Execution vulnerability

Editor+ Remote Code Execution vulnerability discovered by Chiao-Lin Yu Steven Meow in WordPress Plugin Spam Protect for Contact Form 7 versions 1.2.10...

7.2CVSS6AI score0.00639EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2026/04/02 6:31 a.m.•19 views

EUVD-2026-18128

The Spam Protect for Contact Form 7 WordPress plugin before 1.2.10 allows logging to a PHP file, which could allow an attacker with editor access to achieve Remote Code Execution by using a crafted header...

7.2CVSS6AI score0.00639EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/02 6:16 a.m.•24 views

CVE-2026-1540

The Spam Protect for Contact Form 7 WordPress plugin before 1.2.10 allows logging to a PHP file, which could allow an attacker with editor access to achieve Remote Code Execution by using a crafted header...

7.2CVSS0.00639EPSS
SaveExploits0References1
CVE
CVE
•added 2026/04/02 6:00 a.m.•30 views

CVE-2026-1540

The Spam Protect for Contact Form 7 WordPress plugin versions prior to 1.2.10 is vulnerable to Remote Code Execution (RCE) . The root cause is the plugin's ability to log data to a PHP file , which can be exploited by an attacker with editor access using a crafted header . No specific exploit lin...

7.2CVSS5.9AI score0.00639EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/04/02 6:00 a.m.•29 views

CVE-2026-1540

The Spam Protect for Contact Form 7 WordPress plugin before 1.2.10 allows logging to a PHP file, which could allow an attacker with editor access to achieve Remote Code Execution by using a crafted header...

6AI score0.00639EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/02 12:00 a.m.•24 views

PT-2026-29683

CVE-2026-1540 The Spam Protect for Contact Form 7 WordPress plugin before 1.2.10 allows logging to a PHP file, which could allow an attacker with editor access to achieve Remote Code… https://t.co/IMmhcpMAZ9...

7.2CVSS5.9AI score0.00639EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/02 12:00 a.m.•2 views

CVE-2026-1540: Improper Control of Generation of Code

The Spam Protect for Contact Form 7 WordPress plugin before 1.2.10 allows logging to a PHP file, which could allow an attacker with editor access to achieve Remote Code Execution by using a crafted header...

7.2CVSS5.9AI score0.00639EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/03/26 5:02 p.m.•13 views

CVE-2026-32496

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in NYSL Spam Protect for Contact Form 7 wp-contact-form-7-spam-blocker allows Path Traversal.This issue affects Spam Protect for Contact Form 7: from n/a through = 1.2.9...

6.7CVSS5.8AI score0.00536EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/25 6:31 p.m.•15 views

EUVD-2026-15841

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in NYSL Spam Protect for Contact Form 7 wp-contact-form-7-spam-blocker allows Path Traversal.This issue affects Spam Protect for Contact Form 7: from n/a through = 1.2.9...

5.8AI score0.00536EPSS
SaveExploits0References2
NVD
NVD
•added 2026/03/25 5:17 p.m.•19 views

CVE-2026-32496

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in NYSL Spam Protect for Contact Form 7 wp-contact-form-7-spam-blocker allows Path Traversal.This issue affects Spam Protect for Contact Form 7: from n/a through = 1.2.9...

6.8CVSS0.00536EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/03/25 4:14 p.m.•45 views

CVE-2026-32496 WordPress Spam Protect for Contact Form 7 plugin <= 1.2.9 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in NYSL Spam Protect for Contact Form 7 wp-contact-form-7-spam-blocker allows Path Traversal.This issue affects Spam Protect for Contact Form 7: from n/a through = 1.2.9...

6.8CVSS0.00536EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/25 4:14 p.m.•37 views

CVE-2026-32496

CVE-2026-32496 is a path traversal vulnerability in the WordPress plugin Spam Protect for Contact Form 7 (wp-contact-form-7-spam-blocker). Affected: Spam Protect for Contact Form 7

6.8CVSS5.9AI score0.00536EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/25 4:14 p.m.•7 views

CVE-2026-32496 WordPress Spam Protect for Contact Form 7 plugin <= 1.2.9 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in NYSL Spam Protect for Contact Form 7 wp-contact-form-7-spam-blocker allows Path Traversal.This issue affects Spam Protect for Contact Form 7: from n/a through = 1.2.9...

5.9AI score0.00536EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/25 12:00 a.m.•20 views

WordPress plugin Spam Protect for Contact Form 路径遍历漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that extends the...

6.8CVSS5.8AI score0.00536EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/25 12:00 a.m.•1 views

CVE-2026-32496: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in NYSL Spam Protect for Contact Form 7 wp-contact-form-7-spam-blocker allows Path Traversal.This issue affects Spam Protect for Contact Form 7: from n/a through = 1.2.9...

6.8CVSS5.8AI score0.00536EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/25 12:00 a.m.•26 views

PT-2026-28010

Name of the Vulnerable Software and Affected Versions NYSL Spam Protect for Contact Form 7 versions through 1.2.9 Description The software contains a flaw related to improper limitation of a pathname to a restricted directory, also known as Path Traversal. This allows an attacker to potentially...

6.7CVSS5.9AI score0.00536EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2026/03/20 5:41 p.m.•16 views

WordPress Spam Protect for Contact Form 7 plugin <= 1.2.9 - Arbitrary File Deletion vulnerability

Arbitrary File Deletion vulnerability discovered by Andrea Bocchetti in WordPress Plugin Spam Protect for Contact Form 7 versions = 1.2.9...

6.7CVSS5.8AI score0.00536EPSS
SaveExploits0Affected Software1
attackerkb
attackerkb
•added 2024/12/13 3:15 p.m.•13 views

CVE-2023-33996

Missing Authorization vulnerability in CleanTalk Inc Spam protection, AntiSpam, FireWall by CleanTalk cleantalk-spam-protect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spam protection, AntiSpam, FireWall by CleanTalk: from n/a through = 6.10...

8.8CVSS5.8AI score0.00705EPSS
SaveExploits0References3
OSV
OSV
•added 2024/06/25 12:33 p.m.•12 views

MAL-2024-1987 Malicious code in cleantalk-spam-protect (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 12:33 p.m.•10 views

Malicious code in cleantalk-spam-protect (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
Rows per page
Query Builder