Vulnerabilità Plugin WordPress (qui per esteso) fonte: NIST CVES
Aaron Forgue Amazon Showcase WordPress Cart66 Cloud Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer Contact Form 7 Contact Form by Supsystic Developer Toolbar Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress Fluent Forms Form Maker by 10Web WordPress Forminator Forms – Contact Form, Payment Form & Custom Form Builder Icegram Express formerly known as Email Subscribers WordPress Klarna Checkout for WooCommerce WordPress Logo Carousel Gutenberg Block Password Protected – Password Protect your WordPress Site, Pages, & WooCommerce Products – Restrict Content, Protect WooCommerce Category and more Photo Gallery by 10Web – Mobile-Friendly Image Gallery PowerPress Podcasting Responsive Addons for Elementor – Free Elementor Addons Royal Elementor Addons and Templates SKT Blocks – Gutenberg based Page Builder Simple Social Media Share Buttons WordPress TS Poll – Survey, Versus Poll, Image Poll, Video Poll The Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress Ultimate Dashboard WordPress User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor User Registration & Membership WordPress User Registration & Membership – Custom Registration Form, Login Form, and User Profile WP Editor WP STAGING Pro WordPress Backup WPC Admin Columns Widget for Social Page Feeds WordPress WordPress Mega Menu – QuadMenu Z Companion complemento Contact Form 7 para WordPress es vulnerable a la repetición de pedidos en todas las versiones hasta la 6.0.5 incluida, a través de la función 'wpcf7_stripe_skip_spam_check', debido a una validación insuficiente en una clave controlada por el usuario. Esto permite que atacantes no autenticados reutilicen un único PaymentIntent de Stripe para múltiples transacciones. Solo la primera transacción se procesa a través de Stripe, pero el complemento Responsive Addons for Elementor – Free Elementor Addons
