Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Creative Solutions Component: Contact Form Generator Clear all filters
TI-2023-17976 CVE-2023-35911 · GHSA-mvh5-v533-3v55

WordPress Contact Form Generator Plugin <= 2.6.0 is vulnerable to SQL Injection

Priority MEDIUM 44

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Creative Solutions Contact Form Generator : Creative form builder for WordPress allows SQL Injection.This issue affect…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00735 Published 2023-11-06 No fix listed CWE-89
TI-2015-05802 CVE-2015-6965 · GHSA-fm29-x3c3-cjxq

Multiple cross-site request forgery (CSRF) vulnerabilities in the Contact Form Generator…

Priority LOW 36

Multiple cross-site request forgery (CSRF) vulnerabilities in the Contact Form Generator plugin 2.0.1 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1)…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03021 Published 2015-09-16 No fix listed CWE-352