writeups.xyz / The Dark Side of Contact Forms: How I Identified 7 CVEs in WordPress Plugins

Submitter : c2a

Date: 2 July 2024

Bounty : 2,500

Vulnerabilities :

• Blind XSS
• Stored XSS
• HTML Injection

Programs :

• Wordfence

Authors :

• Pedro Paniago (@Dropn0w)

Link :
https://blog.paniago.io/the-dark-side-of-contact-forms-how-i-identified-7-cves-in-wordpress-plugins-30f6111dfebf