krishaweb

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

krishaweb records in CISA KEV

No krishaweb vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Add Multiple Marker 1 record LOW Contact Form 7 Email Add On 1 record MEDIUM

Records

1 record in Contact Form 7 Email Add On · all components

TI-2024-10102 CVE-2024-10898 · GHSA-cgcp-gvp8-4fpv

Contact Form 7 Email Add on <= 1.9 - Authenticated (Contributor+) Local File Inclusion

MEDIUM 43

The Contact Form 7 Email Add on plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.9 via the cf7_email_add_on_add_admin_template() function.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01302 Published 2024-11-21 No fix listed CWE-98

Open these records in search →

Critical	0
High	2
Medium	2
Low	0
No CVSS	0