Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: voidCoders Component: Void Contact Form 7 Widget For Elementor Page Builder Clear all filters
TI-2024-28943 CVE-2024-43291 · GHSA-7gwf-65pq-33ww

Cross-site scripting in voidCoders Void Contact Form 7 Widget For Elementor Page Builder

Priority LOW 26

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in voidCoders Void Contact Form 7 Widget For Elementor Page Builder allows Stored XSS.This issue affects Void Cont…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.0026 Published 2024-08-18 No fix listed CWE-79
TI-2024-05035 CVE-2024-5419 · GHSA-wfv7-jxcv-wwf4

Cross-site scripting in voidthemes Void Contact Form 7 Widget For Elementor Page Builder

Priority LOW 28

The Void Contact Form 7 Widget For Elementor Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cf7_redirect_page' attribute within the plugin's Void Contact From 7 widget in all vers…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00341 Published 2024-07-02 No fix listed CWE-79
TI-2023-28642 CVE-2023-52214 · GHSA-7pfr-rxmf-5m47

WordPress Void Contact Form 7 Widget For Elementor Page Builder plugin <= 2.3 - Broken Access Control vulnerability

Priority LOW 38

Missing Authorization vulnerability in voidCoders Void Contact Form 7 Widget For Elementor Page Builder.This issue affects Void Contact Form 7 Widget For Elementor Page Builder: from n/a through 2.3.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00414 Published 2024-03-26 No fix listed CWE-862