CVE-2018-20979

概要

参考情報

• wordpress.org/plugins/contact-form-7 · Release Notes

contact form 7 のその他の脆弱性

• CVE-2025-3247中 5.3The Contact Form 7 plugin for WordPress is vulnerable to Order Replay in all versions up to, and including, 6.0.5 via the 'wpcf7_stripe_skip…
• CVE-2024-4704中 6.1The Contact Form 7 WordPress plugin before 5.9.5 has an open redirect that allows an attacker to utilize a false URL and redirect to the URL…
• CVE-2024-2242中 6.1The Contact Form 7 plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘active-tab’ parameter in all versions up to…
• CVE-2023-6630中 4.3The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, an…
• CVE-2023-6449高 7.2The Contact Form 7 plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'validate' f…