Vsourz Digital

Records12All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

Vsourz Digital records in CISA KEV

No Vsourz Digital vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Advanced Cf7 Db 4 records MEDIUM All In One Redirection 2 records HIGH Cf7 Invisible Recaptcha 2 records LOW

Records

12 records

TI-2023-02340 CVE-2023-2493 · GHSA-cwmp-669c-fh3g

All In One Redirection < 2.2.0 - Admin+ SQLi

HIGH 67

The All In One Redirection WordPress plugin before 2.2.0 does not properly sanitise and escape multiple parameters before using them in an SQL statement, leading to a SQL injection exploitable by high privilege users suc…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01077 Published 2023-07-10 Fixed in 2.2.0

TI-2022-22289 CVE-2022-45285 · GHSA-249j-wgjq-35gx

Vsourz Digital Advanced Contact form 7 DB Versions 1.7.2 and 1.9.1 is vulnerable to Cross Site Scripting (XSS).

MEDIUM 60

Vsourz Digital Advanced Contact form 7 DB Versions 1.7.2 and 1.9.1 is vulnerable to Cross Site Scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00495 Published 2023-02-13 No fix listed CWE-79

TI-2019-10203 CVE-2019-13571 · GHSA-mhj5-cwc2-fxgx

A SQL injection vulnerability exists in the Vsourz Digital Advanced CF7 DB plugin through…

MEDIUM 49

A SQL injection vulnerability exists in the Vsourz Digital Advanced CF7 DB plugin through 1.6.1 for WordPress.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03995 Published 2019-07-29 No fix listed CWE-89

TI-2023-12736 CVE-2023-28167 · GHSA-hhfw-44rp-96jr

WordPress CF7 Invisible reCAPTCHA Plugin <= 1.3.3 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Vsourz Digital CF7 Invisible reCAPTCHA plugin <= 1.3.3 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00301 Published 2023-11-12 No fix listed CWE-352

TI-2021-07185 CVE-2021-24905 · GHSA-mjq7-mv4f-72x7

Advanced Contact form 7 DB < 1.8.7 - Subscriber+ Arbitrary File Deletion

LOW 36

The Advanced Contact form 7 DB WordPress plugin before 1.8.7 does not have authorisation nor CSRF checks in the acf7_db_edit_scr_file_delete AJAX action, and does not validate the file to be deleted, allowing any authent…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.0077 Published 2022-03-21 Fixed in 1.8.7 CWE-863

TI-2024-20230 CVE-2024-30506 · GHSA-4jhg-h526-7c6c

WordPress All In One Redirection plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability

LOW 32

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vsourz Digital All In One Redirection allows Stored XSS.This issue affects All In One Redirection: from n/a through 2.…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00418 Published 2024-03-29 No fix listed CWE-79

TI-2025-23686 CVE-2025-32621 · GHSA-fv2f-79j5-jgrv

WordPress WP Map Route Planner plugin <= 1.0.0 - CSRF to Stored XSS vulnerability

LOW 31

Cross-Site Request Forgery (CSRF) vulnerability in Vsourz Digital WP Map Route Planner wp-map-route-planner allows Cross Site Request Forgery.This issue affects WP Map Route Planner: from n/a through <= 1.0.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00193 Published 2025-04-09 No fix listed CWE-352

TI-2024-24760 CVE-2024-37245 · GHSA-63w7-g889-pgj2

WordPress All In One Redirection plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Vsourz Digital All In One Redirection allows Reflected XSS.This issue affects All In One Redirection: from n/a…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00308 Published 2024-07-22 No fix listed CWE-79

TI-2026-41493 CVE-2026-57669 · GHSA-hf25-m3ff-vv5r

WordPress Advanced Contact form 7 DB plugin <= 2.0.9 - Broken Access Control vulnerability

LOW 29

Subscriber Broken Access Control in Advanced Contact form 7 DB <= 2.0.9 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0034 Published 2026-07-02 No fix listed CWE-862

TI-2023-27256 CVE-2023-49852 · GHSA-wgwr-qhpr-qch5

WordPress Responsive Slick Slider WordPress plugin <= 1.4 - Content Injection vulnerability

LOW 29

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Vsourz Digital Responsive Slick Slider WordPress allows Code Injection.This issue affects Responsive Slick Slider WordPress:…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00359 Published 2024-06-04 No fix listed CWE-80

TI-2018-14974 CVE-2018-21012 · GHSA-72wq-mg6x-3jhg

The cf7-invisible-recaptcha plugin before 1.3.2 for WordPress has XSS.

LOW 29

The cf7-invisible-recaptcha plugin before 1.3.2 for WordPress has XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00916 Published 2019-09-09 No fix listed CWE-79

TI-2022-11879 CVE-2022-29408 · GHSA-x6xc-r9j4-hqp7

Cross-site scripting in Vsourz Digital Advanced Contact form 7 DB

LOW 28

Persistent Cross-Site Scripting (XSS) vulnerability in Vsourz Digital's Advanced Contact form 7 DB plugin <= 1.8.7 at WordPress.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00709 Published 2022-05-25 No fix listed CWE-79

Open these records in search →

Critical	1
High	6
Medium	5
Low	0
No CVSS	0