Skip to content
OpenAdvisories

Vendor

krishaweb

4 known vulnerabilities.

Products

Email addon for CF7 1 Add Multiple Marker 1 Multi Location Marker 1 Advance Nav Menu Manager 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2024-10898

    Contact Form 7 Email Add on <= 1.9 - Authenticated (Contributor+) Local File Inclusion

    The Contact Form 7 Email Add on plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.9 via the cf7_email_add_on_add_admin_template() function. This makes it possible for authenticated attackers, with Contributor-l…

    krishaweb Email addon for CF7 Web / CMS