VendorsZestardadmin_side_data_storage_for_contact_form_7all versions
Vulnerabilities

Zestard Technologies Admin side data storage for Contact Form 7

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2024-1776
Admin side data storage for Contact Form 7 <= 1.1.1 - Authenticated (Admin+) SQL Injection
Published 2024-02-23 · Modified
7.2EPSS 0.006
CVE-2023-24420
WordPress Admin side data storage for Contact Form 7 Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)
Published 2023-06-15 · Modified
7.1EPSS 0.004
CVE-2024-1779
Admin side data storage for Contact Form 7 plugin <= 1.1.1 - Missing Authorization to Unauthenticated Read Status Update
Published 2024-02-23 · Modified
5.3EPSS 0.004
CVE-2024-1778
Admin side data storage for Contact Form 7 <= 1.1.1 - Missing Authorization to Unauthenticated Bookmark Status Alteration
Published 2024-02-23 · Modified
5.3EPSS 0.004
CVE-2024-1777
Admin side data storage for Contact Form 7 <= 1.1.1 - Cross-Site Request Forgery
Published 2024-02-23 · Modified
4.3EPSS 0.002