Total 75 security vulnerabilities recorded for bestwebsoft software and firmware.
A vulnerability was found in BestWebSoft Contact Form Plugin 1.3.4 on WordPress and classified as problematic. Affected by this issue is the function ...
A vulnerability was found in BestWebSoft Contact Form 3.21. It has been classified as problematic. This affects the function cntctfrm_settings_page of...
A vulnerability, which was classified as problematic, has been found in BestWebSoft Contact Form Plugin 3.51 on WordPress. Affected by this issue is t...
The User Role by BestWebSoft WordPress plugin before 1.6.7 does not protect against CSRF in requests to update role capabilities, leading to arbitrary...
The Post to CSV by BestWebSoft WordPress plugin through 1.4.0 does not properly escape fields when exporting data as CSV, leading to a CSV injection...
The Rating by BestWebSoft WordPress plugin before 1.6 does not validate the submitted rating, allowing submission of long integer, causing a Denial of...
A vulnerability classified as problematic has been found in BestWebSoft Contact Form Plugin 4.0.0. This affects an unknown part. The manipulation lead...
The Error Log Viewer WordPress plugin through 1.1.1 does not validate the path of the log file to clear, allowing high privilege users to clear arbitr...
The Error Log Viewer WordPress plugin before 1.1.2 does not perform nonce check when deleting a log file and does not have path traversal prevention, ...
The Visitors WordPress plugin through 0.3 is affected by an Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability. The plugin would display ...
The BestWebSoft Htaccess plugin through 1.8.1 for WordPress allows wp-admin/admin.php?page=htaccess.php&action=htaccess_editor CSRF. The flag htccss_n...
The quotes-and-tips plugin before 1.20 for WordPress has XSS....
The timesheet plugin before 0.1.5 for WordPress has multiple XSS issues....
The limit-attempts plugin before 1.1.1 for WordPress has SQL injection during IP address handling....
The contact-form-plugin plugin before 3.3.5 for WordPress has XSS....
The pdf-print plugin before 2.0.3 for WordPress has multiple XSS issues....
The error-log-viewer plugin before 1.0.6 for WordPress has multiple XSS issues....
The bws-linkedin plugin before 1.0.5 for WordPress has multiple XSS issues....
The sender plugin before 1.2.1 for WordPress has multiple XSS issues....
The updater plugin before 1.35 for WordPress has multiple XSS issues....
The bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS issues....
The bws-google-maps plugin before 1.3.6 for WordPress has multiple XSS issues....
The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues....