Unauthenticated Cross Site Scripting (XSS) in Calculation For Contact Form 7 <= 1.0 versions.
Vendor
silverplugins217 vulnerabilities
11 published CVES affecting silverplugins217, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 11
- Critical
- 3
- High
- 3
- Medium
- 5
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
- Multiple Shipping And Billing Address For Woocommerce 3
- Build Private Store For Woocommerce 2
- Custom Fields Account Registration For Woocommerce 2
- Calculation For Contact Form 7 1
- Check Pincode For Woocommerce 1
- Dynamic Text Field For Contact Form 7 1
- Product Quantity Dropdown For Woocommerce 1
Latest silverplugins217 CVEs
Newest publication first
-
HighCVSS 7.1 EPSS 0.25%
-
HighCVSS 7.2 EPSS 0.39%
Incorrect Privilege Assignment vulnerability in silverplugins217 Custom Fields Account Registration For Woocommerce custom-fields-account-registration-for-woocommerce allows Privilege Escalation.This issue affects Custom Fields Account Registration For Woocommerce: from n/a throu...
-
MediumCVSS 6.5 EPSS 0.17%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in silverplugins217 Dynamic Text Field For Contact Form 7 dynamic-text-field-for-contact-form-7 allows Stored XSS.This issue affects Dynamic Text Field For Contact Form 7: from n/a...
-
MediumCVSS 4.3 EPSS 0.17%
Cross-Site Request Forgery (CSRF) vulnerability in silverplugins217 Product Quantity Dropdown For Woocommerce product-quantity-dropdown-for-woocommerce allows Cross Site Request Forgery.This issue affects Product Quantity Dropdown For Woocommerce: from n/a through <= 1.2.
-
CriticalCVSS 9.8 EPSS 0.72%
Deserialization of Untrusted Data vulnerability in silverplugins217 Multiple Shipping And Billing Address For Woocommerce different-shipping-and-billing-address-for-woocommerce allows Object Injection.This issue affects Multiple Shipping And Billing Address For Woocommerce: from...
-
MediumCVSS 4.3 EPSS 0.19%
Cross-Site Request Forgery (CSRF) vulnerability in silverplugins217 Custom Fields Account Registration For Woocommerce custom-fields-account-registration-for-woocommerce allows Cross Site Request Forgery.This issue affects Custom Fields Account Registration For Woocommerce: from...
-
CriticalCVSS 9.3 EPSS 0.37%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in silverplugins217 Multiple Shipping And Billing Address For Woocommerce different-shipping-and-billing-address-for-woocommerce allows SQL Injection.This issue affects Multiple Shi...
-
MediumCVSS 5.3 EPSS 0.44%
Missing Authorization vulnerability in silverplugins217 Build Private Store For Woocommerce build-private-store-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Build Private Store For Woocommerce: from n/a through <= 1.0.
-
MediumCVSS 4.3 EPSS 0.18%
Cross-Site Request Forgery (CSRF) vulnerability in silverplugins217 Build Private Store For Woocommerce build-private-store-for-woocommerce allows Cross Site Request Forgery.This issue affects Build Private Store For Woocommerce: from n/a through <= 1.0.
-
CriticalCVSS 9.3 EPSS 0.41%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in silverplugins217 Multiple Shipping And Billing Address For Woocommerce different-shipping-and-billing-address-for-woocommerce allows SQL Injection.This issue affects Multiple Shi...
-
HighCVSS 7.1 EPSS 0.35%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in silverplugins217 Check Pincode For Woocommerce check-pincode-for-woocommerce allows Reflected XSS.This issue affects Check Pincode For Woocommerce: from n/a through <= 1.1.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.