Skip to content
OpenAdvisories

Vendor

sevenspark

13 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.5

    WordPress Contact Form 7 – Dynamic Text Extension plugin <= 5.0.7 - Sensitive Data Exposure vulnerability

    Unauthenticated Sensitive Data Exposure in Contact Form 7 – Dynamic Text Extension <= 5.0.7 versions.

  • High 7.2

    UberMenu <= 3.8.3 - Cross-Site Request Forgery to Settings Reset

    The UberMenu plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.3. This is due to missing or incorrect nonce validation on the ubermenu_delete_all_item_settings and ubermenu_reset_settings functions. Thi…