PT-2023-15409 · Unknown · Themefic Ultimate Addons For Contact Form 7

Minhtuanact · Published 2023-06-19 · Updated 2023-06-27 · CVE-2022-47586

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Themefic Ultimate Addons for Contact Form 7 plugin versions prior to 3.1.24

Description The issue is related to an Unauth. SQL Injection (SQLi) vulnerability. This means that an attacker could potentially inject malicious SQL code into the database without proper authorization, leading to unauthorized access or modification of data.

Recommendations For Themefic Ultimate Addons for Contact Form 7 plugin versions prior to 3.1.24, update to version 3.1.24 or later to resolve the issue.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2022-47586

Affected Products

Themefic Ultimate Addons For Contact Form 7

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2022-47586 · Security Note
• https://osv.dev/vulnerability/CVE-2022-47586 · Vendor Advisory
• https://patchstack.com/database/vulnerability/ultimate-addons-for-contact-form-7/wordpress-ultimate-addons-for-contact-form-7-plugin-3-1-23-sql-injection?_s_id=cve · Note