CVE-2021-36886

HIGH WAF: Low
CVSS 8.8 Published: 2021-12-22
CWE-352 CWE-352

Cross-Site Request Forgery (CSRF) vulnerability discovered in Contact Form 7 Database Addon – CFDB7 WordPress plugin (versions <= 1.2.5.9).

WAF Coverage Analysis

Cross-Site Request Forgery (CSRF) Low WAF Coverage

OWASP: A01:2021 Broken Access Control

Cross-Site Request Forgery (CSRF) Low WAF Coverage

OWASP: A01:2021 Broken Access Control

Affected Software

VendorProductVersion
ciphercoincontact_form_7_database_addonup to 1.2.6.1

References

Back to CVE Database