A WP Life

Records43All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high20CVSS 7.0–8.9

Exploited now

A WP Life records in CISA KEV

No A WP Life vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Event Monster 6 records HIGH Album Gallery 2 records LOW Blog Filter 2 records LOW Formula 2 records LOW Slider Responsive Slideshow 2 records MEDIUM Weather Effect 2 records LOW Coming Soon Maintenance Mode 1 record LOW Contact Form Widget 1 record MEDIUM

Records

1 record in Contact Form Widget · all components

TI-2019-12739 CVE-2019-17072 · GHSA-8f96-54hg-8mw3

The new-contact-form-widget (aka Contact Form Widget - Contact Query, Form Maker) plugin…

MEDIUM 46

The new-contact-form-widget (aka Contact Form Widget - Contact Query, Form Maker) plugin 1.0.9 for WordPress has SQL Injection via all-query-page.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01892 Published 2019-10-10 No fix listed CWE-89

Open these records in search →

Critical	2
High	20
Medium	21
Low	0
No CVSS	0