Advisories · Technology
crmperks Database for Contact Form 7, WPforms, Elementor forms.
Every CVE that names crmperks Database for Contact Form 7, WPforms, Elementor forms among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
Database for Contact Form 7, WPforms, Elementor forms <= 1.5.1 - Unauthenticated Arbitrary File Copy/Upload via Elementor Pro Form Upload Field 'raw_value'
- crmperks Database for Contact Form 7, WPforms, Elementor forms
- Path traversal
- CVSS 8.1 High
Database for Contact Form 7, WPforms, Elementor forms <= 1.5.1 - Unauthenticated Arbitrary File Deletion via CF7 File Field POST Value
- crmperks Database for Contact Form 7, WPforms, Elementor forms
- Path traversal
- CVSS 4.3 Medium
Database for Contact Form 7, WPforms, Elementor forms <= 1.4.9 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Shortcode
- crmperks Database for Contact Form 7, WPforms, Elementor forms
- Broken access control
- CVSS 9.8 CriticalCritical · CVSS 9+
Database for Contact Form 7, WPforms, Elementor forms <= 1.4.7 - Unauthenticated PHP Object Injection via 'download_csv'
- crmperks Database for Contact Form 7, WPforms, Elementor forms
- Insecure deserialization
- CVSS 5.3 Medium
Database for Contact Form 7, WPforms, Elementor forms <= 1.4.5 - Missing Authorization to Unauthenticated Form Data Exfiltration via CSV Export
- crmperks Database for Contact Form 7, WPforms, Elementor forms
- Broken access control
- CVSS 9.8 CriticalCritical · CVSS 9+
Database for Contact Form 7, WPforms, Elementor forms <= 1.4.3 - Unauthenticated PHP Object Injection to Arbitrary File Deletion
- crmperks Database for Contact Form 7, WPforms, Elementor forms
- Insecure deserialization
- CVSS 7.2 High
Database for Contact Form 7, WPforms, Elementor forms <= 1.3.8 - Unauthenticated Stored Cross-Site Scripting
- crmperks Database for Contact Form 7, WPforms, Elementor forms
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Database for Contact Form 7, WPforms, Elementor forms <= 1.3.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
- crmperks Database for Contact Form 7, WPforms, Elementor forms
- Cross-site scripting (XSS)
- CVSS 7.2 High
Contact Form Entries <= 1.3.2 - Authenticated (Administrator+) Arbitrary File Upload
- crmperks Database for Contact Form 7, WPforms, Elementor forms
- Unrestricted file upload