Extension WordPress
Vulnérabilités Contact Form 7 Connector
Cette page rassemble les failles publiées pour Contact Form 7 Connector, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Contact Form 7 Connector
3 fiches
Contact Form 7 Connector <= 1.2.2 – Cross-Site Request Forgery
The Contact Form 7 Connector plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.2. This is due to missing or incorrect nonce validation on several function. This makes it possible for…
*-1.2.2
1.2.3
05/02/2024
Contact Form 7 Connector <= 1.2.2 – Cross-Site Request Forgery to Reflected Cross-Site Scripting
The Contact Form 7 Connector plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.2. This is due to missing or incorrect nonce validation on various functions. This makes it possible…
*-1.2.2
1.2.3
10/01/2024
Contact Form 7 Connector <= 1.1.13 – Reflected Cross-Site Scripting
The Contact Form 7 Connector plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'msg' parameter in versions up to, and including, 1.1.13 due to insufficient input sanitization and output escaping. This makes it possible for…
*-1.1.13
1.1.14
17/02/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.