Read the docs

IT Path Solutions

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

IT Path Solutions records in CISA KEV

No IT Path Solutions vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Contact Form To Any Api 2 records HIGH

Records

2 records in Contact Form To Any Api · all components

TI-2023-16007 CVE-2023-32741 · GHSA-qgj5-fp5w-7cxr

WordPress Contact Form to Any API Plugin <= 1.1.2 is vulnerable to SQL Injection

Priority HIGH 68

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in IT Path Solutions PVT LTD Contact Form to Any API allows SQL Injection.This issue affects Contact Form to Any API: fro…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00701 Published 2023-11-03 No fix listed CWE-89
TI-2024-07061 CVE-2024-7617 · GHSA-mc8h-gfm5-j86q

Contact Form to Any API <= 1.2.4 - Unauthenticated Stored Cross-Site Scripting via Contact Form

Priority LOW 35

The Contact Form to Any API plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Contact Form 7 form fields in all versions up to, and including, 1.2.4 due to insufficient input sanitization and output e…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00615 Published 2024-09-25 No fix listed CWE-79
Open these records in search →