Vsourz Advanced Cf7 Db
4 CVEs affecting Vsourz Advanced Cf7 Db. Latest disclosed: 2023-02-13. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-13571 | Critical | 9.8 | 2019-07-29 | A SQL injection vulnerability exists in the Vsourz Digital Advanced CF7 DB plugin through 1.6.1 for WordPress. Successful exploitation of this vulnerability wo… |
CVE-2021-24905 | High | 8.0 | 2022-03-21 | The Advanced Contact form 7 DB WordPress plugin before 1.8.7 does not have authorisation nor CSRF checks in the acf7_db_edit_scr_file_delete AJAX action, and d… |
CVE-2022-45285 | Medium | 6.1 | 2023-02-13 | Vsourz Digital Advanced Contact form 7 DB Versions 1.7.2 and 1.9.1 is vulnerable to Cross Site Scripting (XSS). |
CVE-2022-29408 | Medium | 4.7 | 2022-05-25 | Persistent Cross-Site Scripting (XSS) vulnerability in Vsourz Digital's Advanced Contact form 7 DB plugin <= 1.8.7 at WordPress. |