itpathsolutions

Products

ProductCVEsExploitedLatest
Contact Form to Any API2–Jul 29, 2026
Any Post Slider1–Mar 21, 2026

Exploited and recent CVEs

  • CVE-2026-15735 Medium 6.4 Contact Form to Any API <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'cf7anyapi_form_field' Post Meta 0.3%
  • CVE-2026-1899 Medium 6.4 Any Post Slider <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'post_type' Shortcode Attribute 0.2%
  • CVE-2024-7617 High 7.2 Contact Form to Any API <= 1.2.4 - Unauthenticated Stored Cross-Site Scripting via Contact Form 0.6%