Skip to content
OpenAdvisories

Vendor

richarddev7

1 known vulnerabilities.

Products

RD Contacto 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2025-5933

    RD Contacto <= 1.4 - Cross-Site Request Forgery to Settings Update

    The RD Contacto plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4. This is due to missing or incorrect nonce validation on the rdWappUpdateData() function. This makes it possible for unauthenticated att…

    richarddev7 RD Contacto Web / CMS