Gsheetconnector Cf7 Google Sheets Connector vulnerabilities

3 vulnerabilities

Known vulnerabilities in Gsheetconnector Cf7 Google Sheets Connector, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5CVE-2024-5654gsheetconnectorcf7_google_sheets_connector+2
EPSS score
0.35%
The CF7 Google Sheets Connector plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'execute_post_data_cg7_free' function in all versions up to, and including, 5.0.9. This makes it possible for unauthenticated attackers to toggle site configuration settings, including WP_DEBUG, WP_DEBUG_LOG, SCRIPT_DEBUG, and SAVEQUERIES.6.1CVE-2023-2320gsheetconnectorcf7_google_sheets_connector+4
EPSS score
0.46%
The CF7 Google Sheets Connector WordPress plugin before 5.0.2, cf7-google-sheets-connector-pro WordPress plugin through 5.0.2 does not escape a parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin7.5CVE-2023-44989gsheetconnectorcf7_google_sheets_connector+1
EPSS score
0.52%
Insertion of Sensitive Information into Log File vulnerability in GSheetConnector CF7 Google Sheets Connector.This issue affects CF7 Google Sheets Connector: from n/a through 5.0.5.