Read the docs

zestardtechnologies

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

zestardtechnologies records in CISA KEV

No zestardtechnologies vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Admin Side Data Storage For Contact Form 7 5 records LOW

Records

5 records in Admin Side Data Storage For Contact Form 7 · all components

TI-2024-01653 CVE-2024-1776 · GHSA-6jr8-r9gw-5fg7

Admin side data storage for Contact Form 7 <= 1.1.1 - Authenticated (Admin+) SQL Injection

Priority LOW 34

The Admin side data storage for Contact Form 7 plugin for WordPress is vulnerable to SQL Injection via the 'form-id' parameter in all versions up to, and including, 1.1.1 due to insufficient escaping on the user supplied…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00557 Published 2024-02-23 No fix listed CWE-89
TI-2024-01656 CVE-2024-1779 · GHSA-q7j6-j275-rpp9

Admin side data storage for Contact Form 7 plugin <= 1.1.1 - Missing Authorization to Unauthenticated Read Status Update

Priority LOW 24

The Admin side data storage for Contact Form 7 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the zt_dcfcf_change_status() function in all versions up to, and…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00386 Published 2024-02-23 No fix listed CWE-862
Open these records in search →