CVE-2014-2265

概要

参考情報

• contactform7.com/2014/02/26/contact-form-7-372 · Patch
• web.archive.org/web/20140727133642/http://www.hedgehogsecurity.co.uk/2014/02/26/contactform7-vulnerability
• wordpress.org/plugins/contact-form-7/changelog
• acunetix.com/vulnerabilities/web/wordpress-plugin-contact-form-7-security-bypass-3-7-1
• cvedetails.com/cve/CVE-2014-2265

contact form 7 のその他の脆弱性

• CVE-2025-3247中 5.3The Contact Form 7 plugin for WordPress is vulnerable to Order Replay in all versions up to, and including, 6.0.5 via the 'wpcf7_stripe_skip…
• CVE-2024-4704中 6.1The Contact Form 7 WordPress plugin before 5.9.5 has an open redirect that allows an attacker to utilize a false URL and redirect to the URL…
• CVE-2024-2242中 6.1The Contact Form 7 plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘active-tab’ parameter in all versions up to…
• CVE-2023-6630中 4.3The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, an…
• CVE-2023-6449高 7.2The Contact Form 7 plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'validate' f…