Void Contact Form 7 Widget For Elementor Page Builder

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-43291 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in voidCoders Void Contact Form 7 Widget For Elementor Page Builder allows Stored XSS.4.1. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Void Contact Form 7 Widget For Elementor Page Builder

NVD

CVSS 3.1

4.8

EPSS

0.2%

CVE-2024-5419 MEDIUM PATCH This Month

The Void Contact Form 7 Widget For Elementor Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cf7_redirect_page' attribute within the plugin's Void Contact From. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

WordPress XSS Void Contact Form 7 Widget For Elementor Page Builder Elementor

NVD

CVSS 3.1

6.4

EPSS

0.4%

CVE-2023-52214 MEDIUM This Month

Missing Authorization vulnerability in voidCoders Void Contact Form 7 Widget For Elementor Page Builder.3. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Void Contact Form 7 Widget For Elementor Page Builder Elementor

NVD

CVSS 3.1

4.3

EPSS

0.4%

CVE-2024-43291

EPSS 0% CVSS 4.8

MEDIUM This Month

XSS Void Contact Form 7 Widget For Elementor Page Builder

NVD

CVE-2024-5419

EPSS 0% CVSS 6.4

MEDIUM PATCH This Month

WordPress XSS Void Contact Form 7 Widget For Elementor Page Builder +1

NVD

CVE-2023-52214

EPSS 0% CVSS 4.3

MEDIUM This Month

Authentication Bypass Void Contact Form 7 Widget For Elementor Page Builder Elementor

NVD