wpdevart Vulnerabilities and Affected Products
Vulnerabilities associated with Contact Form Builder, Contact Widget.
Products
Clear product- Booking calendar, Appointment Booking System12 vulnerabilities
- Responsive Image Gallery, Gallery Album5 vulnerabilities
- Organization chart4 vulnerabilities
- booking_calendar3 vulnerabilities
- Gallery – Image and Video Gallery with Thumbnails3 vulnerabilities
- Contact Form Builder, Contact Widget2 vulnerabilities
- Responsive Vertical Icon Menu2 vulnerabilities
- Widget Countdown2 vulnerabilities
- YouTube Embed, Playlist and Popup by WpDevArt2 vulnerabilities
- Booking Calendar Pro WpDevArt1 vulnerability
- Coming soon and Maintenance mode1 vulnerability
- Contact Form Builder1 vulnerability
- Countdown and CountUp, WooCommerce Sales Timer1 vulnerability
- Countdown and CountUp, WooCommerce Sales Timers1 vulnerability
- Countdown Timer – Widget Countdown1 vulnerability
- Image and Video Lightbox, Image PopUp1 vulnerability
- Poll, Survey, Questionnaire and Voting system1 vulnerability
- Poll, Survey, Questionnaire and Voting system (WordPress plugin)1 vulnerability
- poll\,_survey\,_questionnaire_and_voting_system1 vulnerability
- Pricing Table builder1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-35747MEDIUM | WordPress Contact Form Builder, Contact Widget plugin <= 2.1.7 - Bypass Vulnerability vulnerabilityImproper Restriction of Excessive Authentication Attempts vulnerability in wpdevart Contact Form Builder, Contact Widget allows Functionality Bypass.This issue affects Contact Form Builder, Contact Widget: from n/a through 2.1.7. CWE-307Jun 10, 2024 | CVSS5.3v3.1 | EPSS0.372% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-46075HIGH | WordPress Contact Form Builder, Contact Widget Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in wpdevart Contact Form Builder, Contact Widget plugin <= 2.1.6 versions. CWE-79Oct 26, 2023 | CVSS7.1v3.1 | EPSS0.331% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |