3 matches found
CVE-2024-29102
CVE-2024-29102 is an XSS in the WordPress plugin family Extensions For CF7 (HasThemes Extensions For CF7). Described as Improper Neutralization of Input During Web Page Generation (Stored XSS), it affects Extensions For CF7 versions from n/a up to 3.0.6. Public sources (Red Hat advisory and Wordf...
CVE-2025-24695
CVE-2025-24695 describes a Server-Side Request Forgery (SSRF) in HasThemes Extensions For CF7. Affected software: Extensions For CF7 (WordPress plugin) up to version 3.2.0. Root cause details are not explicitly described beyond SSRF, and exploitation status is not provided in the given documents....
CVE-2023-23899
CVE-2023-23899 affects the WordPress plugin Extensions For CF7 (HasThemes Extensions For CF7) up to version 2.0.8. Root cause: Cross-Site Request Forgery (CSRF) allows unauthenticated attackers to trigger arbitrary plugin activation. Affects versions