Web-Dorado

Records29All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high12CVSS 7.0–8.9

Exploited now

Web-Dorado records in CISA KEV

No Web-Dorado vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Web-dorado Spider Video Player 3 records LOW Contact Form Maker 2 records HIGH Event Calendar Wd 2 records LOW Form Maker 2 records MEDIUM Spidervplayer 2 records LOW Wd Instagram Feed 2 records LOW Wdsocialwidgets 2 records LOW Wp Form Builder 2 records MEDIUM

Records

2 records in Contact Form Maker · all components

TI-2023-02483 CVE-2023-2655 · GHSA-8rfj-2m76-7x2p

Contact Form by WD <= 1.13.23 - Admin+ SQLi

HIGH 67

The Contact Form by WD WordPress plugin through 1.13.23 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00933 Published 2024-01-16 No fix listed CWE-89

TI-2015-02471 CVE-2015-2798 · GHSA-8pfg-p9g9-fjx4

SQL injection vulnerability in Joomla! Component Contact Form Maker 1.0.1 allows remote…

MEDIUM 48

SQL injection vulnerability in Joomla! Component Contact Form Maker 1.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03258 Published 2017-07-25 No fix listed CWE-89

Open these records in search →

Critical	4
High	12
Medium	13
Low	0
No CVSS	0