Contact Form Db Security Vulnerabilities and Issues — Contact Form Db CVE List

CfdbpluginContact Form Db

3 matches found

CVE•added 2014/10/10 2:0 p.m.•46 views

CVE-2014-7139

CVE-2014-7139 documents two XSS vulnerabilities in the WordPress plugin Contact Form DB (aka CFDB/contact-form-7-to-database-extension) up to version 2.8.13. The root cause is insufficient sanitization in the CF7DBPluginShortCodeBuilder page, allowing an attacker to craft GET parameters (form and...

4.3CVSS5.8AI score0.02041EPSS

Web

CVE•added 2015/03/09 4:0 p.m.•45 views

CVE-2015-1874

CVE-2015-1874 affects the WordPress plugin Contact Form DB (CFDB / contact-form-7-to-database-extension) up to version 2.8.31 (before 2.8.32). The vulnerability is a CSRF flaw that allows an attacker to hijack an authenticated administrator’s session to perform a privileged action: deleting all r...

6.8CVSS7.3AI score0.01465EPSS

Web

CVE•added 2015/02/20 4:0 p.m.•39 views

CVE-2015-2040

CVE-2015-2040 describes a cross-site scripting (XSS) vulnerability in the WordPress plugin Contact Form DB (CFDB / contact-form-7-to-database-extension) version 2.8.26. The issue allows remote attackers to inject arbitrary script/HTML via the submit_time parameter on the CF7DBPluginSubmissions pa...

4.3CVSS5.9AI score0.01633EPSS

Web