Browse CVEs

MEDIUM 6.1 CVE-2025-6740 The Contact Form 7 Database Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tmpD’ parameter in all versions up to, a… Contact Form 7 Database Addon 1.3.2+ Fix from $1,6002025-07-04 HIGH 8.8 CVE-2023-31075 Cross-Site Request Forgery (CSRF) vulnerability in Arshid Easy Hide Login.This issue affects Easy Hide Login: from n/a through 1.0.8. Easy Hide Login after 1.0.8 Fix from $1,9502023-11-18 HIGH 7.5 CVE-2022-4303 The WP Limit Login Attempts WordPress plugin through 2.6.4 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which… Wp Limit Login Attempts after 2.6.4 Fix from $1,9502023-01-23 CRITICAL 9.8 CVE-2022-3634 The Contact Form 7 Database Addon WordPress plugin before 1.2.6.5 does not validate data when output it back in a CSV file, which could lead to CSV i… Contact Form 7 Database Addon 1.2.6.5+ Fix from $2,3002022-11-21 HIGH 8.8 CVE-2021-36886 Cross-Site Request Forgery (CSRF) vulnerability discovered in Contact Form 7 Database Addon – CFDB7 WordPress plugin (versions <= 1.2.5.9). Contact Form 7 Database Addon 1.2.6.1+ Fix from $1,9502021-12-22 MEDIUM 6.1 CVE-2021-36885 Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability discovered in Contact Form 7 Database Addon – CFDB7 WordPress plugin (versions <= 1.2… Contact Form 7 Database Addon after 1.2.6.1 Fix from $1,6002021-12-22 HIGH 7.8 CVE-2021-24144 Unvalidated input in the Contact Form 7 Database Addon plugin, versions before 1.2.5.6, was prone to a vulnerability that lets remote attackers injec… Contact Form 7 Database Addon 1.2.5.6+ Fix from $1,9502021-03-18 HIGH 7.5 CVE-2015-6829 Multiple SQL injection vulnerabilities in the getip function in wp-limit-login-attempts.php in the WP Limit Login Attempts plugin before 2.0.1 for Wo… Wp Limit Login Attempts after 2.0.0 Fix from $1,9502015-09-16