WordPress security by component

Country State City Dropdown CF7

Plugin description

Country State City Dropdown CF7 is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published May 22, 2024; the highest CVE/CNA score is 9.8.

Plugin slug: country-state-city-auto-dropdown

Latest vulnerability

CVE-2024-3495: Country State City Dropdown CF7: SQL injection

Country State City Dropdown CF7 is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data.

PublishedMay 22, 2024

Safe version guidanceSee mitigation notes

		Safe version
May 22, 2024	CVE-2024-3495 Country State City Dropdown CF7: SQL injection Country State City Dropdown CF7 is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE9.8 NVDPending