Contact Form 7 Email Add On
1 CVEs
product
Monthly
The Contact Form 7 Email Add on plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.9 via the cf7_email_add_on_add_admin_template() function. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
PHP
Information Disclosure
RCE
WordPress
LFI
+1
NVD
CVSS 3.1
8.8
EPSS
0.2%
EPSS 0%
CVSS 8.8
HIGH
This Week
The Contact Form 7 Email Add on plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.9 via the cf7_email_add_on_add_admin_template() function. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
PHP
Information Disclosure
RCE
+3
NVD