Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: zealopensource Component: Generate Pdf Using Contact Form 7 Clear all filters
TI-2024-25055 CVE-2024-37555 · GHSA-87hq-g7fx-6x68

WordPress Generate PDF using Contact Form 7 plugin <= 4.1.2 - CSRF to Arbitrary File Upload vulnerability

Priority MEDIUM 44

Unrestricted Upload of File with Dangerous Type vulnerability in ZealousWeb Generate PDF using Contact Form 7 generate-pdf-using-contact-form-7.This issue affects Generate PDF using Contact Form 7: from n/a through <= 4.…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.006 Published 2024-07-09 No fix listed CWE-434
TI-2022-02832 CVE-2022-3070 · GHSA-pf9p-4wwq-p4gf

Generate PDF using Contact Form 7 < 3.6 - Admin+ Stored Cross-Site Scripting

Priority MEDIUM 55

The Generate PDF WordPress plugin before 3.6 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disa…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00684 Published 2022-09-26 Fixed in 3.6 CWE-79