Skip to content
Noroxi

zestard records

5 published records for vendor zestard.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 23
  2. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

5 records
  • CVE-2024-1776
    28Monitor

    Admin side data storage for Contact Form 7 <= 1.1.1 - Authenticated (Admin+) SQL Injection

    HighCVSS 7.2No exploitEPSS 0%

    zestard · admin side data storage for contact form 7Feb 23, 2024

  • CVE-2023-24420
    24Monitor

    WordPress Admin side data storage for Contact Form 7 Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    zestard · admin side data storage for contact form 7Jun 15, 2023

  • CVE-2024-1779
    21Monitor

    Admin side data storage for Contact Form 7 plugin <= 1.1.1 - Missing Authorization to Unauthenticated Read Status Update

    MediumCVSS 5.3No exploitEPSS 0%

    zestard · admin side data storage for contact form 7Feb 23, 2024

  • CVE-2024-1778
    21Monitor

    Admin side data storage for Contact Form 7 <= 1.1.1 - Missing Authorization to Unauthenticated Bookmark Status Alteration

    MediumCVSS 5.3No exploitEPSS 0%

    zestard · admin side data storage for contact form 7Feb 23, 2024

  • CVE-2024-1777
    17Monitor

    Admin side data storage for Contact Form 7 <= 1.1.1 - Cross-Site Request Forgery

    MediumCVSS 4.3No exploitEPSS 0%

    zestard · admin side data storage for contact form 7Feb 23, 2024