Dn Footer Contacts Vulnerabilities

The Footer Contacts Bar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action granted they can trick a site adm...

CVSS:

4.3

Affected:

up to 1.8

Fix:

No patched version reported

Disclosed:

Apr 1, 2025

CVE-2025-31839 on NVD →

The DN Footer Contacts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.6.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to injec...

CVSS:

4.4

Affected:

up to 1.6.2

Fixed in:

1.6.3

Disclosed:

Jun 18, 2024

CVE-2024-3410 on NVD →