Advisories · Technology
htplugins Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection).
Every CVE that names htplugins Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.8 CriticalCritical · CVSS 9+
Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) <= 3.4.5 - Unauthenticated Arbitrary File Upload via Signature Field File Upload
- htplugins Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection)
- Unrestricted file upload
- CVSS 8.1 High
Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) <= 3.2.8 - Unauthenticated Arbitrary File Deletion Triggered via Admin Form Submission Deletion
- htplugins Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection)
- Path traversal