Vulnerability index

Browse CVEs

17 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Ultimate Addons For Contact Form 7 MEDIUM 5.4
CVE-2025-6756

The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's UACF7_CUSTOM_FIELDS shortcode …

Fix: 3.5.22+
Fix from $1,600 2025-07-01
Ultimate Addons For Contact Form 7 MEDIUM 6.1
CVE-2025-6212

The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Database module in versions 3.5.11 to 3…

Fix: 3.5.20+
Fix from $1,600 2025-06-26
Ultimate Addons For Contact Form 7 HIGH 7.2
CVE-2025-6220

The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'save_opt…

Fix: 3.5.13+
Fix from $1,950 2025-06-18
Ultimate Before After Image Slider \& Gallery HIGH 7.2
CVE-2025-47549

Unrestricted Upload of File with Dangerous Type vulnerability in Themefic BEAF beaf-before-and-after-gallery allows Upload a Web Shell to a Web Serve…

Fix: after 4.6.10
Fix from $1,950 2025-05-07
Instantio HIGH 7.2
CVE-2025-47550

Unrestricted Upload of File with Dangerous Type vulnerability in Themefic Instantio instantio allows Upload a Web Shell to a Web Server.This issue af…

Fix: after 3.3.16
Fix from $1,950 2025-05-07
Tourfic CRITICAL 9.1
CVE-2025-24650

Unrestricted Upload of File with Dangerous Type vulnerability in Themefic Tourfic tourfic allows Upload a Web Shell to a Web Server.This issue affect…

Fix: 2.15.4+
Fix from $2,300 2025-01-24
Tourfic MEDIUM 6.5
CVE-2024-12032

The Tourfic – Ultimate Hotel Booking, Travel Booking & Apartment Booking WordPress Plugin | WooCommerce Booking plugin for WordPress is vulnerable to…

Fix: 2.15.4+
Fix from $1,600 2024-12-25
Tourfic HIGH 8.8
CVE-2024-29136

Deserialization of Untrusted Data vulnerability in Themefic Tourfic tourfic.This issue affects Tourfic: from n/a through <= 2.11.17.

Fix: 2.11.19+
Fix from $1,950 2024-03-19
Tourfic MEDIUM 6.1
CVE-2024-29137

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themefic Tourfic tourfic.This issue affects Tou…

Fix: after 2.11.7
Fix from $1,600 2024-03-19
Tourfic HIGH 8.8
CVE-2024-29135

Unrestricted Upload of File with Dangerous Type vulnerability in Themefic Tourfic tourfic.This issue affects Tourfic: from n/a through <= 2.11.15.

Fix: 2.11.16+
Fix from $1,950 2024-03-19
Tourfic MEDIUM 5.4
CVE-2024-29134

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themefic Tourfic tourfic.This issue affects Tou…

Fix: 2.11.9+
Fix from $1,600 2024-03-19
Ultimate Addons For Contact Form 7 HIGH 8.1
CVE-2023-30495

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themefic Ultimate Addons for Contact Form 7.Thi…

Fix: 3.1.24+
Fix from $1,950 2023-12-20
Ultimate Addons For Contact Form 7 MEDIUM 6.1
CVE-2023-49766

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themefic Ultimate Addons for Contact Form 7 all…

Fix: after 3.2.0
Fix from $1,600 2023-12-14
Ultimate Addons For Contact Form 7 MEDIUM 6.1
CVE-2023-30493

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Themefic Ultimate Addons for Contact Form 7 plugin <= 3.2.0 versions.

Fix: 3.2.1+
Fix from $1,600 2023-09-27
Ultimate Addons For Contact Form 7 MEDIUM 6.1
CVE-2023-2803

The Ultimate Addons for Contact Form 7 WordPress plugin before 3.1.29 does not sanitise and escape a parameter before outputting it back in the page,…

Fix: 3.1.29+
Fix from $1,600 2023-08-14
Ultimate Addons For Contact Form 7 CRITICAL 9.8
CVE-2022-47586

Unauth. SQL Injection (SQLi) vulnerability in Themefic Ultimate Addons for Contact Form 7 plugin <= 3.1.23 versions.

Fix: 3.1.24+
Fix from $2,300 2023-06-19
Ultimate Addons For Contact Form 7 MEDIUM 6.5
CVE-2023-1615

The Ultimate Addons for Contact Form 7 plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in versions up to, and including, 3…

Fix: after 3.1.23
Fix from $1,600 2023-06-09