CVE-2026-9843

The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the viewpage function in all versions up to, and including, 1.5.1. This makes it possible for unauthenticated attackers to delete...

CVE-2024-1069

The Contact Form Entries plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validation on the 'viewpage' function in versions up to, and including, 1.3.2. This makes it possible for authenticated attackers with administrator-level capabilities or above, to uploa...

ClipBucket script SQL Injection / XSS Vulnerabilities

Exploit for php platform in category web applications Exploit Title : SQL Injection and XSS vulnerability in ClipBucket script Date : 01 July 2013 Exploit Author : 3rr0r1046 IndiShell Vendor Homepage : http://clip-bucket.com/ Category : webapps Tested on : Linux Dork : "Forged by ClipBucket"...

CVE-2007-3563

SQL injection vulnerability in includes/viewpage.php in AV Arcade 2.1b allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewpage action to index.php...