Read the docs

Creative Solutions

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Creative Solutions records in CISA KEV

No Creative Solutions vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Contact Form Generator 3 records MEDIUM Creative Contact Form 2 records CRITICAL Creative Gallery 1 record MEDIUM

Records

3 records in Contact Form Generator · all components

TI-2023-17976 CVE-2023-35911 · GHSA-mvh5-v533-3v55

WordPress Contact Form Generator Plugin <= 2.6.0 is vulnerable to SQL Injection

Priority MEDIUM 44

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Creative Solutions Contact Form Generator : Creative form builder for WordPress allows SQL Injection.This issue affect…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00735 Published 2023-11-06 No fix listed CWE-89
TI-2015-05802 CVE-2015-6965 · GHSA-fm29-x3c3-cjxq

Multiple cross-site request forgery (CSRF) vulnerabilities in the Contact Form Generator…

Priority LOW 36

Multiple cross-site request forgery (CSRF) vulnerabilities in the Contact Form Generator plugin 2.0.1 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1)…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03021 Published 2015-09-16 No fix listed CWE-352
Open these records in search →