Ciphercoin

9 CVEs across 4 Ciphercoin products. Browse Ciphercoin vulnerabilities, severities, and proof-of-concept exploits.

Ciphercoin products with known CVEs

ProductCVEs
Contact Form 7 Database Addon5
Contact Form 7 Database Addon – Cfdb7 (WordPress Plugin)2
Easy Hide Login2
Wp Limit Login Attempts2
Ciphercoin CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-6740Medium6.12025-07-04The Contact Form 7 Database Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tmpD’ parameter in all versions up to, and includi…
CVE-2023-31075Medium5.42023-11-18Cross-Site Request Forgery (CSRF) vulnerability in Arshid Easy Hide Login.This issue affects Easy Hide Login: from n/a through 1.0.8.
CVE-2023-32505Medium5.92023-08-23Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Arshid Easy Hide Login plugin <= 1.0.7 versions.
CVE-2022-4303High7.52023-01-23The WP Limit Login Attempts WordPress plugin through 2.6.4 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it…
CVE-2022-3634Critical9.82022-11-21The Contact Form 7 Database Addon WordPress plugin before 1.2.6.5 does not validate data when output it back in a CSV file, which could lead to CSV injection
CVE-2021-36886Medium6.52021-12-22Cross-Site Request Forgery (CSRF) vulnerability discovered in Contact Form 7 Database Addon – CFDB7 WordPress plugin (versions <= 1.2.5.9).
CVE-2021-36885Medium6.12021-12-22Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability discovered in Contact Form 7 Database Addon – CFDB7 WordPress plugin (versions <= 1.2.6.1).
CVE-2021-24144High7.82021-03-18Unvalidated input in the Contact Form 7 Database Addon plugin, versions before 1.2.5.6, was prone to a vulnerability that lets remote attackers inject arbitrar…
CVE-2015-68292015-09-16Multiple SQL injection vulnerabilities in the getip function in wp-limit-login-attempts.php in the WP Limit Login Attempts plugin before 2.0.1 for WordPress al…