Vulnerabilities

TI-2022-22289 CVE-2022-45285 · GHSA-249j-wgjq-35gx

Vsourz Digital Advanced Contact form 7 DB Versions 1.7.2 and 1.9.1 is vulnerable to Cross Site Scripting (XSS).

MEDIUM 60

Vsourz Digital Advanced Contact form 7 DB Versions 1.7.2 and 1.9.1 is vulnerable to Cross Site Scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00495 Published 2023-02-13 No fix listed CWE-79

TI-2022-11879 CVE-2022-29408 · GHSA-x6xc-r9j4-hqp7

Cross-site scripting in Vsourz Digital Advanced Contact form 7 DB

LOW 28

Persistent Cross-Site Scripting (XSS) vulnerability in Vsourz Digital's Advanced Contact form 7 DB plugin <= 1.8.7 at WordPress.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00709 Published 2022-05-25 No fix listed CWE-79

TI-2021-07185 CVE-2021-24905 · GHSA-mjq7-mv4f-72x7

Advanced Contact form 7 DB < 1.8.7 - Subscriber+ Arbitrary File Deletion

LOW 36

The Advanced Contact form 7 DB WordPress plugin before 1.8.7 does not have authorisation nor CSRF checks in the acf7_db_edit_scr_file_delete AJAX action, and does not validate the file to be deleted, allowing any authent…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.0077 Published 2022-03-21 Fixed in 1.8.7 CWE-863

TI-2019-10203 CVE-2019-13571 · GHSA-mhj5-cwc2-fxgx

A SQL injection vulnerability exists in the Vsourz Digital Advanced CF7 DB plugin through…

MEDIUM 49

A SQL injection vulnerability exists in the Vsourz Digital Advanced CF7 DB plugin through 1.6.1 for WordPress.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03995 Published 2019-07-29 No fix listed CWE-89

Vulnerabilities

Filters

Vsourz Digital Advanced Contact form 7 DB Versions 1.7.2 and 1.9.1 is vulnerable to Cross Site Scripting (XSS).

Cross-site scripting in Vsourz Digital Advanced Contact form 7 DB

Advanced Contact form 7 DB < 1.8.7 - Subscriber+ Arbitrary File Deletion

A SQL injection vulnerability exists in the Vsourz Digital Advanced CF7 DB plugin through…