Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: CipherCoin Component: Contact Form 7 Database Addon Clear all filters
TI-2025-06121 CVE-2025-6740 · GHSA-72r8-m4j3-hjr5

Contact Form 7 Database Addon <= 1.3.1 - Unauthenticated Stored Cross-Site Scripting via tmpD Parameter

Priority LOW 27

The Contact Form 7 Database Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tmpD’ parameter in all versions up to, and including, 1.3.1 due to insufficient input sanitization and output e…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00308 Published 2025-07-04 No fix listed CWE-79
TI-2022-03344 CVE-2022-3634 · GHSA-c77w-6vg2-c6cj

Contact Form 7 Database Addon < 1.2.6.5 - CSV Injection

Priority HIGH 82

The Contact Form 7 Database Addon WordPress plugin before 1.2.6.5 does not validate data when output it back in a CSV file, which could lead to CSV injection

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03981 Published 2022-11-21 Fixed in 1.2.6.5
TI-2021-06436 CVE-2021-24144 · GHSA-gcp2-r7p4-r5p4

Contact Form 7 Database Addon < 1.2.5.6 - CSV Injection

Priority LOW 37

Unvalidated input in the Contact Form 7 Database Addon plugin, versions before 1.2.5.6, was prone to a vulnerability that lets remote attackers inject arbitrary formulas into CSV files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01244 Published 2021-03-18 Fixed in 1.2.5.6 CWE-74