Ciphercoin - vulnerabilities (CVEs)
9 CVEs in 5 products, 0 in the last 30 days, newest from 2025-07-04.
Products
- Contact Form 7 Database Addon - 5 CVEs
- Contact Form 7 Database Addon Cfdb7 Wordpress Plugin - 2 CVEs
- Easy Hide Login - 2 CVEs
- Wp Limit Login Attempts - 2 CVEs
- Contact Form 7 Database Addon - Cfdb7 - 0 CVEs
Newest CVEs of Ciphercoin
- CVE-2025-6740 - CVSS 6.1 (medium), 2025-07-04: The Contact Form 7 Database Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tmpD’ parameter in all versions up to, and…
- CVE-2023-31075 - CVSS 8.8 (high), 2023-11-18: Cross-Site Request Forgery (CSRF) vulnerability in Arshid Easy Hide Login.This issue affects Easy Hide Login: from n/a through 1.0.8.
- CVE-2023-32505 - CVSS 5.9 (medium), 2023-08-23: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Arshid Easy Hide Login plugin <= 1.0.7 versions.
- CVE-2022-4303 - CVSS 7.5 (high), 2023-01-23: The WP Limit Login Attempts WordPress plugin through 2.6.4 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it…
- CVE-2022-3634 - CVSS 9.8 (critical), 2022-11-21: The Contact Form 7 Database Addon WordPress plugin before 1.2.6.5 does not validate data when output it back in a CSV file, which could lead to CSV injection
- CVE-2021-36886 - CVSS 8.8 (high), 2021-12-22: Cross-Site Request Forgery (CSRF) vulnerability discovered in Contact Form 7 Database Addon – CFDB7 WordPress plugin (versions <= 1.2.5.9).
- CVE-2021-36885 - CVSS 6.1 (medium), 2021-12-22: Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability discovered in Contact Form 7 Database Addon – CFDB7 WordPress plugin (versions <= 1.2.6.1).
- CVE-2021-24144 - CVSS 7.8 (high), 2021-03-18: Unvalidated input in the Contact Form 7 Database Addon plugin, versions before 1.2.5.6, was prone to a vulnerability that lets remote attackers inject…
- CVE-2015-6829 - CVSS 7.5 (high), 2015-09-16: Multiple SQL injection vulnerabilities in the getip function in wp-limit-login-attempts.php in the WP Limit Login Attempts plugin before 2.0.1 for WordPress…
