Approved changes feed: RSS · Atom

cpe:2.3:a:bestweblayout:contact_form_to_db_by_bestwebsoft:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBestweblayout (9390df4e-767c-5a65-8d05-9004ab24e571)
ProductContact Form To Db By Bestwebsoft (0dc80e91-54d5-5fc3-b482-0b8730816b0e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-36508 vulnerable 2026-06-08 06:08:12.115984 WordPress Contact Form to DB by BestWebSoft Plugin <= 1.7.1 is vulnerable to SQL Injection
HIGH (7.6)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BestWebSoft Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress contact-form-to-db allows SQL Injection.This issue affects Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress: from n/a through 1.7.1.
Published: 2023-10-31T14:23:21.313Z
Updated: 2026-04-28T16:08:30.537Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.