Lucene search
WpvulndbWPVDB-ID:1FBC305D-5E3A-4749-B5A6-82DD5D4EBF6AHistoryNov 16, 2023 - 12:00 a.m.
Contact form 7 Custom validation <= 1.1.3 - Unauthenticated SQLi
2023-11-1600:00:00
wpscan.com
12
contact form 7
custom validation
sql injection
unauthenticated users
security vulnerability
Description The plugin does not properly sanitise and escape the post parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated uers
Related
cvelist
cvelist
nvd
nvd
CVE-2023-40609
2023-11-06 09:15:08
vulnrichment
vulnrichment
cve
cve
CVE-2023-40609
2023-11-06 09:15:08
prion
prion
Sql injection
2023-11-06 09:15:00
wordfence
wordfence
AI Score
8
Confidence
Low
EPSS
0.001
Percentile
33.0%
Related for WPVDB-ID:1FBC305D-5E3A-4749-B5A6-82DD5D4EBF6A