Team IT Security (TSEC) Nachrichtenportal Logo


🕵️ CVE-2024-2791 | Metform Elementor Contact Form Builder Plugin up to 3.8.5 on WordPress Widgets cross site scripting (ID 3061715)


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability classified as problematic has been found in Metform Elementor Contact Form Builder Plugin up to 3.8.5 on WordPress. Affected is an unknown function of the component Widgets. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2024-2791. It is possible to launch the attack remotely. There is no exploit available. ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🕵️ CVE-2023-6788 | Metform Elementor Contact Form Builder Plugin up to 3.8.1 on WordPress cross-site request forgery (ID 3011284)


📈 89.37 Punkte
🕵️ Sicherheitslücken

💾 WordPress Metform Elementor Contact Form Builder 3.1.2 Cross Site Scripting


📈 86.53 Punkte
💾 IT Security Tools

🕵️ CVE-2023-0714 | Metform Elementor Contact Form Builder Plugin up to 3.2.4 on WordPress Double Extension unrestricted upload


📈 83.67 Punkte
🕵️ Sicherheitslücken

⚠️ [webapps] Metform Elementor Contact Form Builder v3.1.2 - Unauthenticated Stored Cross-Site Scripting (XSS)


📈 81.91 Punkte
⚠️ PoC

⚠️ #0daytoday #Metform Elementor Contact Form Builder v3.1.2 - Unauthenticated Stored Cross-Site Scrip [#0day #Exploit]


📈 78.71 Punkte
⚠️ PoC

🕵️ CVE-2022-23179 | Contact Form & Lead Form Elementor Builder Plugin up to 1.6.x on WordPress cross site scripting


📈 72.19 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-23180 | Contact Form & Lead Form Elementor Builder Plugin up to 1.7.3 on WordPress Setting authorization (ID 2670484)


📈 63.29 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-47505 | Elementor Elementor Plugin up to 3.16.4 on WordPress Elementor.Com cross site scripting


📈 60.07 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-32517 | PluginOps MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder Plugin redirect


📈 56.1 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-47166 | Void Contact Form 7 Widget for Elementor Page Builder Plugin void_cf7_opt_in_user_data_track cross-site request forgery


📈 55.18 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-0484 | Contact Form 7 Widget for Elementor Page Builder & Gutenberg Blocks Plugin cross-site request forgery


📈 55.18 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-4950 | Interactive Contact Form and Multi Step Form Builder Plugin cross site scripting


📈 54.08 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-5990 | nteractive Contact Form and Multi Step Form Builder with Drag & Drop Editor Plugin cross-site request forgery


📈 50.87 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-52135 | WS Form Drag & Drop Contact Form Builder Plugin up to 1.9.170 on WordPress sql injection


📈 49.79 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-50896 | weForms Easy Drag & Drop Contact Form Builder Plugin up to 1.6.17 on WordPress cross site scripting


📈 49.5 Punkte
🕵️ Sicherheitslücken

🕵️ Ninja Forms Contact Form up to 3.4.33 on WordPress Drag/Drop Form Builder wp_ajax_nf_oauth_disconnect cross-site request forgery


📈 49.44 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-45070 | 10Web Form Builder Team Form Maker Plugin up to 1.15.18 on WordPress cross site scripting


📈 48.51 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-45071 | 10Web Form Builder Team Form Maker Plugin up to 1.15.18 on WordPress cross site scripting


📈 48.51 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-5337 | Contact Form Form for All Plugin up to 1.2 on WordPress Shortcode cross site scripting


📈 48.13 Punkte
🕵️ Sicherheitslücken

🕵️ Elementor Contact Form DB Plugin up to 1.5 on WordPress Admin Page cross-site request forgery


📈 48.1 Punkte
🕵️ Sicherheitslücken

🕵️ Elementor Pro Plugin up to 2.0.9 on WordPress wp-admin/customize.php elementor-edit-template cross site scripting


📈 45.43 Punkte
🕵️ Sicherheitslücken

🕵️ Webdorado Contact Form Builder Plugin up to 1.0.68 on WordPress wp-admin/admin-ajax.php $_GET['action'] cross site request forgery


📈 45.16 Punkte
🕵️ Sicherheitslücken

🕵️ Contact Form for WordPress – Ultimate Form Builder Lite <= 1.3.6 - SQL Injection


📈 43.74 Punkte
🕵️ Sicherheitslücken

⚠️ [webapps] - WordPress Plugin Contact Form Manager - Cross-Site Request Forgery / Cross-Site Scripting


📈 43.5 Punkte
⚠️ PoC

🕵️ contact-form-plugin Plugin up to 3.95 on WordPress cross site scripting


📈 42.7 Punkte
🕵️ Sicherheitslücken

🕵️ contact-form-plugin Plugin up to 3.51 on WordPress cross site scripting


📈 42.7 Punkte
🕵️ Sicherheitslücken

🕵️ contact-form-plugin Plugin up to 4.0.5 on WordPress cross site scripting


📈 42.7 Punkte
🕵️ Sicherheitslücken

🕵️ contact-form-plugin Plugin up to 4.0.1 on WordPress cross site scripting


📈 42.7 Punkte
🕵️ Sicherheitslücken

🕵️ contact-form-plugin Plugin up to 3.3.4 on WordPress cross site scripting


📈 42.7 Punkte
🕵️ Sicherheitslücken

🕵️ Elementor Website Builder Plugin up to 3.1.3 on WordPress image-box.php title_size cross site scripting


📈 42.48 Punkte
🕵️ Sicherheitslücken

🕵️ Elementor Website Builder Plugin up to 3.1.3 on WordPress icon-box.php title_size cross site scripting


📈 42.48 Punkte
🕵️ Sicherheitslücken

🕵️ Elementor Website Builder Plugin up to 3.1.3 on WordPress Saved Pages accordion.php title_html_tag cross site scripting


📈 42.48 Punkte
🕵️ Sicherheitslücken

🕵️ Elementor Website Builder Plugin up to 3.1.3 on WordPress Saved Pages divider.php html_tag cross site scripting


📈 42.48 Punkte
🕵️ Sicherheitslücken

🕵️ Elementor Website Builder Plugin up to 3.1.3 on WordPress Saved Pages heading.php header_size cross site scripting


📈 42.48 Punkte
🕵️ Sicherheitslücken

🕵️ Elementor Website Builder Plugin up to 3.1.3 on WordPress column.php html_tag cross site scripting


📈 42.48 Punkte
🕵️ Sicherheitslücken

matomo
•