KrishaWeb vulnerabilities
We track 1 vulnerability in KrishaWeb products across 2 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 21, 2024.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest KrishaWeb vulnerabilities
- 8.8 High severity
Email addon for CF7: Improper Control of Filename for Include/Require Statement in PHP Program
The Contact Form 7 Email Add on plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.9 via the cf7_email_add_on_add_admin_template() function. This makes it possible for authenticated attackers, with Contributor-le