CVE-2023-47871
- EPSS 0.12%
- Veröffentlicht 09.12.2024 13:15:32
- Zuletzt bearbeitet 09.12.2024 13:15:32
Missing Authorization vulnerability in IT Path Solutions Contact Form to Any API allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form to Any API: from n/a through 1.1.6.
CVE-2024-7617
- EPSS 1.27%
- Veröffentlicht 25.09.2024 03:15:03
- Zuletzt bearbeitet 02.10.2024 16:02:25
The Contact Form to Any API plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Contact Form 7 form fields in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping. This makes it possibl...
CVE-2024-30242
- EPSS 0.28%
- Veröffentlicht 28.03.2024 05:15:52
- Zuletzt bearbeitet 21.11.2024 09:11:31
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in IT Path Solutions Contact Form to Any API.This issue affects Contact Form to Any API: from n/a through 1.1.8.
CVE-2023-32741
- EPSS 0.2%
- Veröffentlicht 04.11.2023 00:15:08
- Zuletzt bearbeitet 13.02.2025 17:16:33
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in IT Path Solutions PVT LTD Contact Form to Any API allows SQL Injection.This issue affects Contact Form to Any API: from n/a through 1.1.2.