Vulnerability index

Browse CVEs

8 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Contact Form 7 Database Addon MEDIUM 6.1
CVE-2025-6740

The Contact Form 7 Database Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tmpD’ parameter in all versions up to, a…

Fix: 1.3.2+
Fix from $1,600 2025-07-04
Easy Hide Login HIGH 8.8
CVE-2023-31075

Cross-Site Request Forgery (CSRF) vulnerability in Arshid Easy Hide Login.This issue affects Easy Hide Login: from n/a through 1.0.8.

Fix: after 1.0.8
Fix from $1,950 2023-11-18
Wp Limit Login Attempts HIGH 7.5
CVE-2022-4303

The WP Limit Login Attempts WordPress plugin through 2.6.4 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which…

Fix: after 2.6.4
Fix from $1,950 2023-01-23
Contact Form 7 Database Addon CRITICAL 9.8
CVE-2022-3634

The Contact Form 7 Database Addon WordPress plugin before 1.2.6.5 does not validate data when output it back in a CSV file, which could lead to CSV i…

Fix: 1.2.6.5+
Fix from $2,300 2022-11-21
Contact Form 7 Database Addon HIGH 8.8
CVE-2021-36886

Cross-Site Request Forgery (CSRF) vulnerability discovered in Contact Form 7 Database Addon – CFDB7 WordPress plugin (versions <= 1.2.5.9).

Fix: 1.2.6.1+
Fix from $1,950 2021-12-22
Contact Form 7 Database Addon MEDIUM 6.1
CVE-2021-36885

Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability discovered in Contact Form 7 Database Addon – CFDB7 WordPress plugin (versions <= 1.2…

Fix: after 1.2.6.1
Fix from $1,600 2021-12-22
Contact Form 7 Database Addon HIGH 7.8
CVE-2021-24144

Unvalidated input in the Contact Form 7 Database Addon plugin, versions before 1.2.5.6, was prone to a vulnerability that lets remote attackers injec…

Fix: 1.2.5.6+
Fix from $1,950 2021-03-18
Wp Limit Login Attempts HIGH 7.5
CVE-2015-6829

Multiple SQL injection vulnerabilities in the getip function in wp-limit-login-attempts.php in the WP Limit Login Attempts plugin before 2.0.1 for Wo…

Fix: after 2.0.0
Fix from $1,950 2015-09-16