Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: GSheetConnector Component: Cf7 Google Sheets Connector Clear all filters
TI-2024-05250 CVE-2024-5654 · GHSA-jp4r-5fv4-jvvc

CF7 Google Sheets Connector <= 5.0.9 - Missing Authorization to Limited Site Configuration Update

Priority LOW 35

The CF7 Google Sheets Connector plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'execute_post_data_cg7_free' function in all versions up to, and including,…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00352 Published 2024-06-08 No fix listed CWE-862
TI-2023-02176 CVE-2023-2320 · GHSA-h3r4-5pqh-485c

CF7 Google Sheets Connector < 5.0.2 - Reflected XSS

Priority MEDIUM 60

The CF7 Google Sheets Connector WordPress plugin before 5.0.2, cf7-google-sheets-connector-pro WordPress plugin through 5.0.2 does not escape a parameter before outputting it back in an attribute, leading to a Reflected…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00458 Published 2023-07-04 Fixed in 5.0.2