Advanced Cf7 Db

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-29408 May 25, 16:15 MEDIUM This Month

Persistent Cross-Site Scripting (XSS) vulnerability in Vsourz Digital's Advanced Contact form 7 DB plugin <= 1.8.7 at WordPress. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Plugin Advanced Cf7 Db Vsourz

NVD

CVSS 3.1

6.1

EPSS

0.7%

CVE-2019-13571 Jul 29, 18:15 CRITICAL POC Act Now

A SQL injection vulnerability exists in the Vsourz Digital Advanced CF7 DB plugin through 1.6.1 for WordPress. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress SQLi Wordpress Plugin Advanced Cf7 Db Vsourz

NVD GitHub

CVSS 3.1

9.8

EPSS

4.0%

CVE-2022-29408

EPSS 1% CVSS 6.1

MEDIUM This Month

WordPress XSS Wordpress Plugin +2

NVD

CVE-2019-13571

EPSS 4% CVSS 9.8

CRITICAL POC Act Now

WordPress SQLi Wordpress Plugin +2

NVD GitHub