CVE-2021-36885

概要

参考情報

• patchstack.com/database/vulnerability/contact-form-cfdb7/wordpress-contact-form-7-database-addon-cfdb7-plugin-1-2-6-1-unauthenticated-stored-cross-site-scripting-xss-vulnerability · Third Party Advisory
• wordpress.org/plugins/contact-form-cfdb7 · Release Notes

contact form 7 database addon のその他の脆弱性

• CVE-2025-6740中 6.1The Contact Form 7 Database Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tmpD’ parameter in all versions…
• CVE-2022-3634緊急 9.8The Contact Form 7 Database Addon WordPress plugin before 1.2.6.5 does not validate data when output it back in a CSV file, which could lead…
• CVE-2021-36886高 8.8Cross-Site Request Forgery (CSRF) vulnerability discovered in Contact Form 7 Database Addon – CFDB7 WordPress plugin (versions <= 1.2.5.9).
• CVE-2021-24144高 7.8Unvalidated input in the Contact Form 7 Database Addon plugin, versions before 1.2.5.6, was prone to a vulnerability that lets remote attack…