VendorsVsourzadvanced_cf7_dball versions
Vulnerabilities

Vsourz Advanced CF7 DB

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2019-13571
A SQL injection vulnerability exists in the Vsourz Digital Advanced CF7 DB plugin through 1.6.1 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system.
Published 2019-07-29 · Modified
9.8EPSS 0.040
CVE-2021-24905
Advanced Contact form 7 DB < 1.8.7 - Subscriber+ Arbitrary File Deletion
Published 2022-03-21 · Modified
8.0EPSS 0.008
CVE-2022-29408
WordPress Advanced Contact form 7 DB plugin <= 1.8.7 - Unauthenticated Persistent Cross-Site Scripting (XSS) vulnerability
Published 2022-05-25 · Modified
6.1EPSS 0.007
CVE-2022-45285
Vsourz Digital Advanced Contact form 7 DB Versions 1.7.2 and 1.9.1 is vulnerable to Cross Site Scripting (XSS).
Published 2023-02-13 · Modified
6.1EPSS 0.005