WordPress Plugin Vulnerabilities

Contact Form To Email <= 1.1.4 - CSRF & XSS

Description

The Contact Form Email WordPress plugin was affected by a CSRF & XSS security vulnerability.

Affects Plugins

Plugin icon
contact-form-to-email
Fixed in 1.1.5

References

URL
https://packetstormsecurity.com/files/#131901/

Miscellaneous

Submitter
pvdl
Verified
No
WPVDB ID
c1d92138-9b76-4874-ad5f-9bcccba1b7e3

Timeline

Publicly Published
2015-05-13 (about 11 years ago)
Added
2015-05-15 (about 10 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2014-08-01
Title
dmsguestbook 1.7.0 - Multiple Remote Vulnerabilities
Published
2014-12-14
Title
WP-FB-AutoConnect <= 4.0.5 - XSS/CSRF
Published
2014-08-01
Title
Enable Media Replace <= 2.3 - Multiple Vulnerabilities
Published
2015-01-12
Title
Pods < 2.5 - Authenticated XSS & CSRF
Published
2019-07-02
Title
Insert or Embed Articulate Content into WordPress < 4.29991 - Authenticated Arbitrary Folder Deletion and Rename