ARI Soft

Records12All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

ARI Soft records in CISA KEV

No ARI Soft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ari Stream Quiz 3 records MEDIUM Ari Adminer 2 records LOW Contact Form 7 Connector 2 records MEDIUM Ari Fancy Lightbox 1 record LOW

Records

2 records in Contact Form 7 Connector · all components

TI-2024-00214 CVE-2024-0239 · GHSA-8mgx-wgjw-q32g

Contact Form 7 Connector < 1.2.3 - Reflected XSS

MEDIUM 60

The Contact Form 7 Connector WordPress plugin before 1.2.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against administr…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00454 Published 2024-01-16 Fixed in 1.2.3 CWE-79

TI-2024-16398 CVE-2024-24884 · GHSA-475g-6fvx-3hr3

WordPress Contact Form 7 Connector Plugin <= 1.2.2 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 37

Cross-Site Request Forgery (CSRF) vulnerability in ARI Soft Contact Form 7 Connector.This issue affects Contact Form 7 Connector: from n/a through 1.2.2.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00214 Published 2024-02-12 No fix listed CWE-352

Open these records in search →

Critical	1
High	4
Medium	7
Low	0
No CVSS	0