Tech-banker Contact Bank — known CVE vulnerabilities

Every CVE whose affected-product data names Tech-banker Contact Bank, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2022-3350 — CVSS 4.8 (medium): The Contact Bank WordPress plugin through 3.0.30 does not sanitise and escape some of its Form settings, which could allow high privilege…
• CVE-2014-3841 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in the Contact Bank plugin before 2.0.20 for WordPress allows remote attackers to inject arbitrary…