Skip to content
OpenAdvisories

Vendor

Zestard Technologies

5 known vulnerabilities.

Products

Admin side data storage for Contact Form 7 5
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2024-1778

    Admin side data storage for Contact Form 7 <= 1.1.1 - Missing Authorization to Unauthenticated Bookmark Status Alteration

    The Admin side data storage for Contact Form 7 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the zt_dcfcf_change_bookmark() function in all versions up to, and including, 1.1.1. This makes it poss…

    Zestard Technologies Admin side data storage for Contact Form 7 Web / CMS
  • Medium 4.3
    CVE-2024-1777

    Admin side data storage for Contact Form 7 <= 1.1.1 - Cross-Site Request Forgery

    The Admin side data storage for Contact Form 7 plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.1. This is due to missing or incorrect nonce validation on the settings update function. This makes it po…

    Zestard Technologies Admin side data storage for Contact Form 7 Web / CMS
  • Medium 5.3
    CVE-2024-1779

    Admin side data storage for Contact Form 7 plugin <= 1.1.1 - Missing Authorization to Unauthenticated Read Status Update

    The Admin side data storage for Contact Form 7 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the zt_dcfcf_change_status() function in all versions up to, and including, 1.1.1. This makes it possib…

    Zestard Technologies Admin side data storage for Contact Form 7 Web / CMS