Database for Contact Form 7, WPforms, Elementor forms vulnerabilities
6 known vulnerabilities in Database for Contact Form 7, WPforms, Elementor forms from Crmperks. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.1 High severity
Database for Contact Form 7, WPforms…: Improper Limitation of a Pathname to a Restricted Directory
The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the view_page function in all versions up to, and including, 1.5.1. This makes it possible for u
- 9.8 Critical severity
Database for Contact Form 7, WPforms…: Deserialization of Untrusted Data
The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.7 via deserialization of untrusted input in the 'download_csv' function. This makes it possible for u
- 9.8 Critical severity
Database for Contact Form 7, WPforms…: Deserialization of Untrusted Data
The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.3 via deserialization of untrusted input in the get_lead_detail function. This makes it possible for
- 7.2 High severity
Database for Contact Form 7, WPforms…: Improper Neutralization of Input During Web Page Generation
The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.3.8 due to insufficient input sanitization and output escaping. This makes it possible for unaut
- 7.2 High severity
Database for Contact Form 7, WPforms…: Unrestricted Upload of File with Dangerous Type
The Contact Form Entries plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validation on the 'view_page' function in versions up to, and including, 1.3.2. This makes it possible for authenticated attackers with administrator
- 9.8 Critical severity
Database for Contact Form 7, WPforms…: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CRM Perks Database for Contact Form 7, WPforms, Elementor forms contact-form-entries allows SQL Injection.This issue affects Database for Contact Form 7, WPfo