Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: BestWebSoft Component: Contact Form To Db Clear all filters
TI-2024-23547 CVE-2024-35678 · GHSA-24vv-fh33-8gqp

WordPress Contact Form to DB by BestWebSoft plugin <= 1.7.2 - SQL Injection vulnerability

Priority LOW 38

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BestWebSoft Contact Form to DB by BestWebSoft.This issue affects Contact Form to DB by BestWebSoft: from n/a through 1…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00445 Published 2024-06-08 No fix listed CWE-89
TI-2023-13538 CVE-2023-29096 · GHSA-87g3-q4pf-fc8f

WordPress Contact Form to DB by BestWebSoft Plugin <= 1.7.0 is vulnerable to SQL Injection

Priority LOW 39

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BestWebSoft Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress.This issue affects Contact Form…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00706 Published 2023-12-20 No fix listed CWE-89
TI-2023-18347 CVE-2023-36508 · GHSA-mph8-5cmm-748x

WordPress Contact Form to DB by BestWebSoft Plugin <= 1.7.1 is vulnerable to SQL Injection

Priority MEDIUM 50

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BestWebSoft Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress contact-form-to-db allows SQL I…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00732 Published 2023-10-31 No fix listed CWE-89
TI-2017-01471 CVE-2017-2171 · GHSA-947h-g3wj-rr28

Cross-site scripting in BestWebSoft Captcha

Priority LOW 29

Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact Form prior to version 4.0.6, Contact Form to DB prior to version…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00886 Published 2017-05-22 No fix listed CWE-79