Read the docs

Wpagecontact Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Wpagecontact Project records in CISA KEV

No Wpagecontact Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wpagecontact 1 record LOW

Records

1 record

TI-2021-06695 CVE-2021-24403 · GHSA-hfq3-j248-m7rx

WordPress Page Contact <= 1.0 - Authenticated (editor+) SQL Injection

Priority LOW 35

The Orders functionality in the WordPress Page Contact plugin through 1.0 has an order_id parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01516 Published 2021-09-20 No fix listed CWE-89
Open these records in search →