Known vulnerabilities in the Contact Form Builder plugin
11 security advisories have been published for the Contact Form Builder plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Contact Form Builder - Server-Side Request Forgery (SSRF) (CVE-2024-13450) LOW
- Contact Form Builder - Remote Code Execution (CVE-2024-7782) HIGH
- Contact Form Builder - Remote Code Execution (CVE-2024-7777) CRITICAL
- Contact Form Builder - SQL Injection (CVE-2024-7780) HIGH
- Contact Form Builder - Security Vulnerability (CVE-2024-7775) MEDIUM
- Contact Form Builder - SQL Injection (CVE-2024-7702) HIGH
- Contact Form Builder - Security Vulnerability (CVE-2024-1640) MEDIUM
- Contact Form Builder - Security Vulnerability (CVE-2024-1218) MEDIUM
- Contact Form Builder - Broken Access Control (CVE-2024-1217) HIGH
- Contact Form Builder - Cross-Site Scripting (XSS) (CVE-2023-5048) MEDIUM
- Contact Form Builder - Cross-Site Scripting (XSS) (CVE-2023-3645) MEDIUM