Advisories · Technology
vsourz1td Advanced Contact form 7 DB.
Every CVE that names vsourz1td Advanced Contact form 7 DB among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
Advanced Contact form 7 DB <= 2.1.1 - Missing Authorization to Authenticated (Contributor+) Information Disclosure via 'acf7db' Shortcode
- vsourz1td Advanced Contact form 7 DB
- Broken access control
- CVSS 4.3 Medium
Advanced Contact form 7 DB <= 2.1.3 - Missing Authorization to Authenticated (Custom+) Unauthorized Data Import via 'import_cf7_id'
- vsourz1td Advanced Contact form 7 DB
- Broken access control
- CVSS 5.4 Medium
Advanced CF7 DB <= 2.0.9 - Cross-Site Request Forgery to Form Entry Deletion
- vsourz1td Advanced Contact form 7 DB
- Cross-site request forgery (CSRF)
- CVSS 4.3 Medium
Advanced CF7 DB <= 2.0.9 - Missing Authorization to Authenticated (Subscriber+) Form Submissions Excel Export
- vsourz1td Advanced Contact form 7 DB
- Broken access control
- CVSS 5.3 Medium
Advanced Contact form 7 DB <= 2.0.2 - Sensitive Information Exposure
- vsourz1td Advanced Contact form 7 DB
- Information disclosure
- CVSS 5.3 Medium
Advanced Contact form 7 DB <= 2.0.2 - Missing Authorization to Unauthenticated Information Disclosure
- vsourz1td Advanced Contact form 7 DB
- Broken access control