Skip to content
OpenAdvisories

Vendor

zealopensource

10 known vulnerabilities.

Products

Accept Stripe Payments Using Contact Form 7 2 Smart Appointment & Booking 2 Generate PDF using Contact Form 7 2 User Registration Using Contact Form 7 1 Accept Authorize.NET Payments Using Contact Form 7 1 Abandoned Contact Form 7 1 Accept SagePay Payments Using Contact Form 7 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2024-6316

    Generate PDF using Contact Form 7 <= 4.1.2 - Cross-Site Request Forgery to Arbitrary File Upload

    The Generate PDF using Contact Form 7 plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File Upload in versions up to, and including, 4.1.2. This is due to missing nonce validation and missing file type validation in the 'wp_cf7_pd…

    zealopensource Generate PDF using Contact Form 7 Web / CMS
  • High 8.8
    CVE-2024-6317

    Generate PDF using Contact Form 7 <= 4.1.2 - Cross-Site Request Forgery to Arbitrary File Deletion

    The Generate PDF using Contact Form 7 plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File Upload in versions up to, and including, 4.1.2. This is due to missing nonce validation and the plugin not properly validating a file or i…

    zealopensource Generate PDF using Contact Form 7 Web / CMS