Bestwebsoft
Bestwebsoft Contact Form TO DB: vulnerabilidades y CVE
Bestwebsoft Contact Form TO DB tiene 7 vulnerabilidades publicadas, 2 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE7
Últimos 12 meses2
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-39745 | Alta (7.1) | 0.24% | — | 6 oct 2026 | Unauthenticated Cross Site Scripting (XSS) in Contact Form to DB by BestWebSoft <= 1.7.6 versions. |
| CVE-2026-13359 | Alta (7.2) | 0.24% | — | 9 sept 2026 | The Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via cntctfrm_contact_dropdown Parameter in all versions up to, and… |
| CVE-2024-35678 | Alta (8.8) | 0.45% | — | 8 jun 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BestWebSoft Contact Form to DB by BestWebSoft.This issue affects Contact Form to DB by BestWebSoft: from n/a through… |
| CVE-2023-29096 | Alta (8.8) | 0.71% | — | 20 dic 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BestWebSoft Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress.This issue affects Contact… |
| CVE-2023-36508 | Crítica (9.8) | 0.72% | — | 31 oct 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BestWebSoft Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress contact-form-to-db allows SQL… |
| CVE-2017-18492 | Media (6.1) | 1.5% | — | 13 ago 2019 | The contact-form-to-db plugin before 1.5.7 for WordPress has multiple XSS issues. |
| CVE-2017-2171 | Media (6.1) | 0.89% | — | 22 may 2017 | Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact Form prior to version 4.0.6, Contact Form to DB prior to… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.