Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: CRM Perks Component: Database For Contact Form 7, Wpforms, Elementor Forms Clear all filters
TI-2022-03317 CVE-2022-3604 · GHSA-fpx6-qj6w-4m83

Contact Form Entries < 1.3.0 - CSV Injection

Priority HIGH 69

The Contact Form Entries WordPress plugin before 1.3.0 does not validate data when its output in a CSV file, which could lead to CSV injection.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00428 Published 2024-01-16 Fixed in 1.3.0 CWE-1236
TI-2023-14821 CVE-2023-31095 · GHSA-mj8x-x54q-8r6p

WordPress Integration for Contact Form 7 HubSpot Plugin <= 1.2.8 is vulnerable to Open Redirection

Priority LOW 27

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms.This issue affects Integration for HubSpot and Contact Form 7, WP…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00362 Published 2023-12-29 No fix listed CWE-601
TI-2023-14918 CVE-2023-31212 · GHSA-3x9m-qxj4-gff3

WordPress Contact Form Entries Plugin <= 1.3.0 is vulnerable to SQL Injection

Priority MEDIUM 50

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CRM Perks Database for Contact Form 7, WPforms, Elementor forms contact-form-entries allows SQL Injection.This issue a…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00743 Published 2023-10-31 No fix listed CWE-89