Vulnerabilities

TI-2024-16398 CVE-2024-24884 · GHSA-475g-6fvx-3hr3

WordPress Contact Form 7 Connector Plugin <= 1.2.2 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 37

Cross-Site Request Forgery (CSRF) vulnerability in ARI Soft Contact Form 7 Connector.This issue affects Contact Form 7 Connector: from n/a through 1.2.2.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00214 Published 2024-02-12 No fix listed CWE-352

TI-2024-00214 CVE-2024-0239 · GHSA-8mgx-wgjw-q32g

Contact Form 7 Connector < 1.2.3 - Reflected XSS

MEDIUM 60

The Contact Form 7 Connector WordPress plugin before 1.2.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against administr…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00454 Published 2024-01-16 Fixed in 1.2.3 CWE-79

Vulnerabilities

Filters

WordPress Contact Form 7 Connector Plugin <= 1.2.2 is vulnerable to Cross Site Request Forgery (CSRF)

Contact Form 7 Connector < 1.2.3 - Reflected XSS