zealopensource

Records20All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

zealopensource records in CISA KEV

No zealopensource vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Generate Pdf Using Contact Form 7 4 records MEDIUM Accept Stripe Payments Using Contact Form 7 1 record LOW Track Geolocation Of Users Using Contact Form 7 1 record LOW

Records

1 record in Accept Stripe Payments Using Contact Form 7 · all components

TI-2024-11366 CVE-2024-12255 · GHSA-355f-hgvp-6hq8

Accept Stripe Payments Using Contact Form 7 <= 2.5 - Unauthenticated Information Exposure

LOW 31

The Accept Stripe Payments Using Contact Form 7 plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.5 via the cf7sa-info.php file that returns phpinfo() data.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00516 Published 2024-12-12 No fix listed CWE-200

Open these records in search →

Critical	1
High	5
Medium	14
Low	0
No CVSS	0