All 5 CVE vulnerabilities found in Admin side data storage for Contact Form 7, with AI-generated Chinese analysis, references, and POCs.
Vendor: Zestard Technologies
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2024-1778 | Admin side data storage for Contact Form 7 <= 1.1.1 - Missing Authorization to Unauthenticated Bookmark Status Alteration CWE-862 | 4.3 | Medium | 2024-02-23 |
| CVE-2024-1776 | Admin side data storage for Contact Form 7 <= 1.1.1 - Authenticated (Admin+) SQL Injection CWE-89 | 7.2 | High | 2024-02-23 |
| CVE-2024-1777 | Admin side data storage for Contact Form 7 <= 1.1.1 - Cross-Site Request Forgery CWE-352 | 4.3 | Medium | 2024-02-23 |
| CVE-2024-1779 | Admin side data storage for Contact Form 7 plugin <= 1.1.1 - Missing Authorization to Unauthenticated Read Status Update CWE-862 | 5.3 | Medium | 2024-02-23 |
| CVE-2023-24420 | WordPress Admin side data storage for Contact Form 7 Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS) CWE-79 | 7.1 | High | 2023-06-15 |
All 5 known CVE vulnerabilities affecting Admin side data storage for Contact Form 7 with full Chinese analysis, references, and POCs where available.