CyberSecBulletin

Rocklobsterinc vulnerabilities

We track 1 vulnerability in Rocklobsterinc products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on December 1, 2023.

1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score

Latest Rocklobsterinc vulnerabilities

  • 7.2 High severity

    Contact Form 7: Unrestricted Upload of File with Dangerous Type

    CVE-2023-6449RocklobsterincEPSS 1.75%

    The Contact Form 7 plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'validate' function and insufficient blocklisting on the 'wpcf7_antiscript_file_name' function in versions up to, and including, 5.8