Scottpaterson vulnerabilities
We track 2 vulnerabilities in Scottpaterson products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 1, 2026.
2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score
Latest Scottpaterson vulnerabilities
- 7.2 High severity
Business Essentials for Contact Form 7: Improper Neutralization of Input During Web Page Generation
The Business Essentials for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'gateway' Form Field in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping. This makes it possible
- 8.3 High severity
Time Clock Pro: Improper Control of Generation of Code
The Time Clock plugin and Time Clock Pro plugin for WordPress are vulnerable to Remote Code Execution in versions up to, and including, 1.2.2 (for Time Clock) and 1.1.4 (for Time Clock Pro) via the 'etimeclockwp_load_function_callback' function. This allows un