Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: vsourz1td Clear all filters
TI-2026-05992 CVE-2026-6831 · GHSA-8v4v-v89h-r3q8

Missing authorization in vsourz1td Advanced Contact form 7 DB

Priority LOW 29

The Advanced Contact form 7 DB plugin for WordPress is vulnerable to missing authorization in all versions up to, and including, 2.0.9.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00354 Published 2026-09-23 No fix listed CWE-862
TI-2026-15239 CVE-2026-18594 · GHSA-3x6q-4q9w-c7h4

Missing authorization in vsourz1td Advanced Contact form 7 DB

Priority LOW 20

The Advanced Contact form 7 DB plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.3.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00366 Published 2026-09-10 No fix listed CWE-862
TI-2026-00596 CVE-2026-0814 · GHSA-74px-mhgq-xp77

Advanced CF7 DB <= 2.0.9 - Missing Authorization to Authenticated (Subscriber+) Form Submissions Excel Export

Priority LOW 20

The Advanced Contact form 7 DB plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'vsz_cf7_export_to_excel' function in all versions up to, and including, 2.0.9.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00315 Published 2026-04-08 No fix listed CWE-862
TI-2024-03469 CVE-2024-3723 · GHSA-58cj-373v-pc84

Advanced Contact form 7 DB <= 2.0.2 - Sensitive Information Exposure

Priority LOW 30

The Advanced Contact form 7 DB plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.0.2 via the wp-content/uploads/advanced-cf7-upload directory.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00439 Published 2024-06-11 No fix listed CWE-922
TI-2024-04022 CVE-2024-4319 · GHSA-7crr-rw95-x6c5

Advanced Contact form 7 DB <= 2.0.2 - Missing Authorization to Unauthenticated Information Disclosure

Priority LOW 31

The Advanced Contact form 7 DB plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'vsz_cf7_export_to_excel' function in versions up to, and including, 2.0.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00482 Published 2024-06-11 No fix listed CWE-862