Read the docs

Contact Form Advanced Database Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Contact Form Advanced Database Project records in CISA KEV

No Contact Form Advanced Database Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Contact Form Advanced Database 1 record LOW

Records

1 record

TI-2021-07072 CVE-2021-24790 · GHSA-3p9w-pv5h-crrp

Contact Form Advanced Database <= 1.0.8 - Unauthorised AJAX Calls

Priority LOW 20

The Contact Form Advanced Database WordPress plugin through 1.0.8 does not have any authorisation as well as CSRF checks in its delete_cf7_data and export_cf7_data AJAX actions, available to any authenticated users, whic…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00382 Published 2021-12-13 No fix listed CWE-862
Open these records in search →