Skip to content
OpenAdvisories

Vendor

Kofi Mokome

8 known vulnerabilities.

Products

Message Filter for Contact Form 7 8
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.1
    CVE-2024-13362

    Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

    Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject …

    bPlugins webfactory unitecms nicheaddons Web / CMS
  • Medium 6.3
    CVE-2024-54254

    WordPress Message Filter for Contact Form 7 plugin <= 1.6.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Kofi Mokome Message Filter for Contact Form 7 cf7-message-filter.This issue affects Message Filter for Contact Form 7: from n/a through <= 1.6.3.

    Kofi Mokome Message Filter for Contact Form 7
  • Medium 4.3
    CVE-2024-12026

    Message Filter for Contact Form 7 <= 1.6.3 - Missing Authorization to Authenticated (Subscriber+) New Filter Creation

    The Message Filter for Contact Form 7 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the saveFilter() function in all versions up to, and including, 1.6.3. This makes it possible for authenticated …

    Kofi Mokome Message Filter for Contact Form 7 Web / CMS
  • Medium 4.3
    CVE-2024-12027

    Message Filter for Contact Form 7 <= 1.6.3 - Missing Authorization to Authenticated (Subscriber+) Filter Updates/Deletions

    The Message Filter for Contact Form 7 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the updateFilter() and deleteFilter() functions in all versions up to, and including, 1.6.3. This makes it possi…

    Kofi Mokome Message Filter for Contact Form 7 Web / CMS