AC
Product
Advanced Cf7 DB
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 3Low 0
Watch
Add Advanced Cf7 DB to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-13571 | 9.8 | Jul 29 | A SQL injection vulnerability exists in the Vsourz Digital Advanced CF7 DB plugin through 1.6.1 for WordPress Affected: through 1.6.1 |
| CVE-2021-24905 | 8.0 | Mar 21 | The Advanced Contact form 7 DB WordPress plugin before 1.8.7 does not have authorisation nor CSRF checks in the acf7_db_edit_scr_file_delete AJAX action, and does not validate the… Affected: before 1.8.7 |
| CVE-2022-45285 | 6.1 | Feb 13 | Vsourz Digital Advanced Contact form 7 DB Versions 1.7.2 and 1.9.1 is vulnerable to Cross Site Scripting (XSS) Affected: 1.7.2; 1.9.1 |
| CVE-2022-29408 | 6.1 | May 25 | Persistent Cross-Site Scripting (XSS) vulnerability in Vsourz Digital's Advanced Contact form 7 DB plugin <= 1.8.7 at WordPress Affected: through 1.8.7 |
| CVE-2024-3723 | 5.3 | Jun 11 | Advanced Contact form 7 DB <= 2.0.2 - Sensitive Information Exposure Affected: through 2.0.2 |
Showing 5
