Skip to content
Noroxi

ZealousWeb records

6 published records for vendor zealousweb.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
33.3%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22
  2. 23
  3. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

6 records
  • CVE-2024-37555
    39Monitor

    WordPress Generate PDF using Contact Form 7 plugin <= 4.1.2 - CSRF to Arbitrary File Upload vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    zealousweb · generate pdf using contact form 7Jul 9, 2024

  • CVE-2024-6317
    35Monitor

    Generate PDF using Contact Form 7 <= 4.1.2 - Cross-Site Request Forgery to Arbitrary File Deletion

    HighCVSS 8.8No exploitEPSS 1%

    zealousweb · generate pdf using contact form 7Jul 9, 2024

  • CVE-2024-6316
    35Monitor

    Generate PDF using Contact Form 7 <= 4.1.2 - Cross-Site Request Forgery to Arbitrary File Upload

    HighCVSS 8.8No exploitEPSS 1%

    zealousweb · generate pdf using contact form 7Jul 9, 2024

  • CVE-2024-12255
    21Monitor

    Accept Stripe Payments Using Contact Form 7 <= 2.5 - Unauthenticated Information Exposure

    MediumCVSS 5.3No exploitEPSS 1%

    zealousweb · accept stripe payments using contact form 7Dec 12, 2024

  • CVE-2022-3070
    19Monitor

    Generate PDF using Contact Form 7 < 3.6 - Admin+ Stored Cross-Site Scripting

    MediumCVSS 4.8No exploitEPSS 1%

    zealousweb · generate pdf using contact form 7Sep 26, 2022

  • CVE-2023-49188
    19Monitor

    WordPress Track Geolocation Of Users Using Contact Form 7 Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 4.8No exploitEPSS 0%

    zealousweb · track geolocation of users using contact form 7Dec 15, 2023