Skip to content
OpenAdvisories

Vendor

Zestard Technologies

5 known vulnerabilities.

Products

Admin side data storage for Contact Form 7 5
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2024-1776

    Admin side data storage for Contact Form 7 <= 1.1.1 - Authenticated (Admin+) SQL Injection

    The Admin side data storage for Contact Form 7 plugin for WordPress is vulnerable to SQL Injection via the 'form-id' parameter in all versions up to, and including, 1.1.1 due to insufficient escaping on the user supplied parameter and lack of sufficient prepa…

    Zestard Technologies Admin side data storage for Contact Form 7 Web / CMS
  • High 7.1
    CVE-2023-24420

    WordPress Admin side data storage for Contact Form 7 Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Zestard Technologies Admin side data storage for Contact Form 7 plugin <= 1.1.1 versions.

    Zestard Technologies Admin side data storage for Contact Form 7