Read the docs

BestWebSoft

Records87All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high18CVSS 7.0–8.9

Exploited now

BestWebSoft records in CISA KEV

No BestWebSoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Contact Form 11 records MEDIUM Contact Form To Db 5 records MEDIUM Error Log Viewer 5 records LOW Visitors Online 4 records MEDIUM Captcha 3 records LOW Facebook Button 3 records LOW Gallery 3 records HIGH Htaccess 3 records MEDIUM

Records

5 records in Contact Form To Db · all components

TI-2023-18347 CVE-2023-36508 · GHSA-mph8-5cmm-748x

WordPress Contact Form to DB by BestWebSoft Plugin <= 1.7.1 is vulnerable to SQL Injection

Priority MEDIUM 50

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BestWebSoft Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress contact-form-to-db allows SQL I…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00732 Published 2023-10-31 No fix listed CWE-89
TI-2023-13538 CVE-2023-29096 · GHSA-87g3-q4pf-fc8f

WordPress Contact Form to DB by BestWebSoft Plugin <= 1.7.0 is vulnerable to SQL Injection

Priority LOW 39

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BestWebSoft Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress.This issue affects Contact Form…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00706 Published 2023-12-20 No fix listed CWE-89
TI-2024-23547 CVE-2024-35678 · GHSA-24vv-fh33-8gqp

WordPress Contact Form to DB by BestWebSoft plugin <= 1.7.2 - SQL Injection vulnerability

Priority LOW 38

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BestWebSoft Contact Form to DB by BestWebSoft.This issue affects Contact Form to DB by BestWebSoft: from n/a through 1…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00445 Published 2024-06-08 No fix listed CWE-89
TI-2017-01471 CVE-2017-2171 · GHSA-947h-g3wj-rr28

Cross-site scripting in BestWebSoft Captcha

Priority LOW 29

Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact Form prior to version 4.0.6, Contact Form to DB prior to version…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00886 Published 2017-05-22 No fix listed CWE-79
Open these records in search →