WordPress Plugin Vulnerabilities

Contact Form 7 to Database Extension 2.10.32 - CSV Injection

Description

Note: The plugin has been closed on WP and moved to Github (https://github.com/mdsimpson/contact-form-7-to-database-extension/releases)

Affects Plugins

Plugin icon
contact-form-7-to-database-extension
Fixed in 2.10.36

References

CVE
CVE-2018-9035
Exploitdb
44367

Miscellaneous

Submitter
Ryan
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
80665d3c-2bde-4615-887d-d2ca7f300967

Timeline

Publicly Published
2018-04-09 (about 8 years ago)
Added
2018-04-09 (about 8 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2018-08-16
Title
Export Users to CSV <= 1.1.1 - CSV Injection
Published
2024-03-25
Title
Essential Addons for Elementor < 5.9.12 - Contributor+ Stored XSS
Published
2016-11-10
Title
W3 Total Cache < 0.9.5 - Information Disclosure Race Condition
Published
2023-06-02
Title
Contact Form and Calls To Action by vcita <= 2.7.1 - Settings Update Via CSRF
Published
2024-11-14
Title
External Database Based Actions <= 0.1 - Authenticated (Subscriber+) Authentication Bypass