Contact Form To Db Security Vulnerabilities and Issues — Contact Form To Db CVE List

BestwebsoftContact Form To Db

5 matches found

CVE•added 2023/10/31 2:23 p.m.•134 views

CVE-2023-36508

CVE-2023-36508 —SQL Injection in the WordPress plugin "Contact Form to DB by BestWebSoft – Messages Database". Affected versions: from n/a through 1.7.1 (BestWebSoft). Root cause: improper neutralization of input in SQL commands, enabling unauthenticated injection under administrator context. Imp...

9.8CVSS8.9AI score0.00716EPSS

Save

CVE•added 2023/12/20 5:16 p.m.•83 views

CVE-2023-29096

CVE-2023-29096 affects the WordPress plugin Contact Form to DB by BestWebSoft – Messages Database, with an SQL Injection due to improper neutralization of input in an SQL command. Affected versions:

8.8CVSS8.8AI score0.00706EPSS

Save

CVE•added 2019/08/13 4:47 p.m.•81 views

CVE-2017-18492

The CVE applies to the WordPress plugin contact-form-to-db,

6.1CVSS6AI score0.01458EPSS

Save

CVE•added 2024/06/08 3:57 p.m.•78 views

CVE-2024-35678

CVE-2024-35678 is an authenticated SQL injection in the WordPress plugin Contact Form to DB by BestWebSoft — Messages Database Plugin for WordPress, affecting

8.8CVSS8.8AI score0.00445EPSS

Save

CVE•added 2017/05/22 4:00 p.m.•73 views

CVE-2017-2171

CVE-2017-2171 detail: A cross-site scripting vulnerability affects BestWebSoft WordPress plugins that display the BestWebSoft menu. The issue arises from a common function used to render the menu (CWE-79), enabling remote attackers to execute arbitrary script in a logged-in user’s browser. Affect...

6.1CVSS6.1AI score0.00886EPSS

Save