Lucene search
HistoryJun 19, 2023 - 12:15 p.m.
CVE-2022-47586
sql injection
themefic
ultimate addons
contact form 7
vulnerability
cve-2022-47586
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.3
Confidence
High
EPSS
0.001
Percentile
36.5%
Unauth. SQL Injection (SQLi) vulnerability in Themefic Ultimate Addons for Contact Form 7 plugin <= 3.1.23 versions.
Affected configurations
Node
themeficultimate_addons_for_contact_form_7Range<3.1.24wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| themefic | ultimate_addons_for_contact_form_7 | * | cpe:2.3:a:themefic:ultimate_addons_for_contact_form_7:*:*:*:*:*:wordpress:*:* |
Related
cvelist
cvelist
prion
prion
Sql injection
2023-06-19 12:15:00
cve
cve
CVE-2022-47586
2023-06-19 12:15:09
wpvulndb
wpvulndb
Ultimate Addons for Contact Form 7 < 3.1.24 - Unauthenticated SQLi
2023-05-09 00:00:00
wordfence
wordfence
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.3
Confidence
High
EPSS
0.001
Percentile
36.5%
Related for NVD:CVE-2022-47586