plugin

Cf7 Store To Db Lite Vulnerabilities

3 known security issues reported for the Cf7 Store To Db Lite WordPress plugin. Most recent disclosed Feb 21, 2022.

1 medium

Running Cf7 Store To Db Lite on your site? Check whether your installed version is affected.

Scan your site free

Form Store to DB [cf7-store-to-db-lite] < 1.1.0 (closed)

unknown

[en] Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confus...

Affected:
up to 1.1.0
Fixed in:
1.1.0
Disclosed:
Feb 21, 2022

CVE-2021-24867 on NVD →

Form Store to DB [cf7-store-to-db-lite] < 1.1.1 (closed)

unknown

[en] The Form Store to DB WordPress plugin before 1.1.1 does not sanitise and escape parameter keys before outputting it back in the created entry, allowing unauthenticated attacker to perform Cross-Site Scripting attacks against admin

Affected:
up to 1.1.1
Fixed in:
1.1.1
Disclosed:
Feb 14, 2022

CVE-2021-25107 on NVD →

Form Store to DB <= 1.1.0 - Stored Cross-Site Scripting

medium

The Form Store to DB WordPress plugin before 1.1.1 does not sanitise and escape parameter keys before outputting it back in the created entry, allowing unauthenticated attacker to perform Cross-Site Scripting attacks against admin

CVSS:
6.1
Affected:
up to 1.1.0
Fixed in:
1.1.1
Disclosed:
Jan 17, 2022

CVE-2021-25107 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database