Advisories · Technology
Database for Contact Form 7, WPforms, Elementor forms.
Every CVE that names Database for Contact Form 7, WPforms, Elementor forms among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.8 Medium
Database for Contact Form 7, WPforms, Elementor forms < 1.5.5 - Authenticated SQL Injection via id Parameter
- Database for Contact Form 7, WPforms, Elementor forms
- SQL injection
- CVSS 7.1 High
Database for Contact Form 7, WPforms, Elementor forms < 1.5.3 - Reflected XSS via form_id
- Database for Contact Form 7, WPforms, Elementor forms
- Cross-site scripting (XSS)
- CVSS 5.0 Medium
Database for Contact Form 7, WPforms, Elementor forms < 1.5.2 - Unauthenticated PHP Object Injection via Entry File Field
- Database for Contact Form 7, WPforms, Elementor forms