Vulnerabilities

TI-2026-41493 CVE-2026-57669 · GHSA-hf25-m3ff-vv5r

WordPress Advanced Contact form 7 DB plugin <= 2.0.9 - Broken Access Control vulnerability

LOW 29

Subscriber Broken Access Control in Advanced Contact form 7 DB <= 2.0.9 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0034 Published 2026-07-02 No fix listed CWE-862

TI-2025-23686 CVE-2025-32621 · GHSA-fv2f-79j5-jgrv

WordPress WP Map Route Planner plugin <= 1.0.0 - CSRF to Stored XSS vulnerability

LOW 31

Cross-Site Request Forgery (CSRF) vulnerability in Vsourz Digital WP Map Route Planner wp-map-route-planner allows Cross Site Request Forgery.This issue affects WP Map Route Planner: from n/a through <= 1.0.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00193 Published 2025-04-09 No fix listed CWE-352

TI-2024-24760 CVE-2024-37245 · GHSA-63w7-g889-pgj2

WordPress All In One Redirection plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Vsourz Digital All In One Redirection allows Reflected XSS.This issue affects All In One Redirection: from n/a…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00308 Published 2024-07-22 No fix listed CWE-79

TI-2023-27256 CVE-2023-49852 · GHSA-wgwr-qhpr-qch5

WordPress Responsive Slick Slider WordPress plugin <= 1.4 - Content Injection vulnerability

LOW 29

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Vsourz Digital Responsive Slick Slider WordPress allows Code Injection.This issue affects Responsive Slick Slider WordPress:…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00359 Published 2024-06-04 No fix listed CWE-80

TI-2024-20230 CVE-2024-30506 · GHSA-4jhg-h526-7c6c

WordPress All In One Redirection plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability

LOW 32

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vsourz Digital All In One Redirection allows Stored XSS.This issue affects All In One Redirection: from n/a through 2.…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00418 Published 2024-03-29 No fix listed CWE-79

TI-2023-12736 CVE-2023-28167 · GHSA-hhfw-44rp-96jr

WordPress CF7 Invisible reCAPTCHA Plugin <= 1.3.3 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Vsourz Digital CF7 Invisible reCAPTCHA plugin <= 1.3.3 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00301 Published 2023-11-12 No fix listed CWE-352

TI-2023-02340 CVE-2023-2493 · GHSA-cwmp-669c-fh3g

All In One Redirection < 2.2.0 - Admin+ SQLi

HIGH 67

The All In One Redirection WordPress plugin before 2.2.0 does not properly sanitise and escape multiple parameters before using them in an SQL statement, leading to a SQL injection exploitable by high privilege users suc…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01077 Published 2023-07-10 Fixed in 2.2.0

TI-2022-22289 CVE-2022-45285 · GHSA-249j-wgjq-35gx

Vsourz Digital Advanced Contact form 7 DB Versions 1.7.2 and 1.9.1 is vulnerable to Cross Site Scripting (XSS).

MEDIUM 60

Vsourz Digital Advanced Contact form 7 DB Versions 1.7.2 and 1.9.1 is vulnerable to Cross Site Scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00495 Published 2023-02-13 No fix listed CWE-79

TI-2022-11879 CVE-2022-29408 · GHSA-x6xc-r9j4-hqp7

Cross-site scripting in Vsourz Digital Advanced Contact form 7 DB

LOW 28

Persistent Cross-Site Scripting (XSS) vulnerability in Vsourz Digital's Advanced Contact form 7 DB plugin <= 1.8.7 at WordPress.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00709 Published 2022-05-25 No fix listed CWE-79

TI-2021-07185 CVE-2021-24905 · GHSA-mjq7-mv4f-72x7

Advanced Contact form 7 DB < 1.8.7 - Subscriber+ Arbitrary File Deletion

LOW 36

The Advanced Contact form 7 DB WordPress plugin before 1.8.7 does not have authorisation nor CSRF checks in the acf7_db_edit_scr_file_delete AJAX action, and does not validate the file to be deleted, allowing any authent…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.0077 Published 2022-03-21 Fixed in 1.8.7 CWE-863

TI-2018-14974 CVE-2018-21012 · GHSA-72wq-mg6x-3jhg

The cf7-invisible-recaptcha plugin before 1.3.2 for WordPress has XSS.

LOW 29

The cf7-invisible-recaptcha plugin before 1.3.2 for WordPress has XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00916 Published 2019-09-09 No fix listed CWE-79

TI-2019-10203 CVE-2019-13571 · GHSA-mhj5-cwc2-fxgx

A SQL injection vulnerability exists in the Vsourz Digital Advanced CF7 DB plugin through…

MEDIUM 49

A SQL injection vulnerability exists in the Vsourz Digital Advanced CF7 DB plugin through 1.6.1 for WordPress.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03995 Published 2019-07-29 No fix listed CWE-89

Vulnerabilities

Filters