WordPress Contact Form 7 Vulnerabilities
Wordpress Contact Form 7 vulnerabilities.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Improper Input Validation in Contact Form 7 Plugin for WordPress
CVE-2026-14236WordPressContact Form 7👾🟡Arbitrary Shortcode Execution Vulnerability in Contact Form 7 – Dynamic Text Extension Plugin for WordPress
CVE-2025-13146WordPressContact Form 7 – Dynam...6.5MEDIUMReflected XSS in Message Filter for Contact Form 7 by Kofi Mokome
CVE-2026-57423WordPressMessage Filter For Con...7.1HIGHCross-site Scripting Vulnerability in Aman CF7 Views - Entry Management for Contact Form 7
CVE-2026-57411WordPressCf7 Views – Comp...7.1HIGHPHP Object Injection Vulnerability in WordPress Form Plugins
CVE-2026-12081WordPressDatabase For Contact F...👾🟡5MEDIUMStored Cross-Site Scripting Vulnerability in Form Vibes Database Manager for Forms Plugin
CVE-2026-13378WordPressForm Vibes – Save Cont...7.2HIGHStored Cross-Site Scripting Vulnerability in Connect Contact Form 7 and Mailchimp Plugin for WordPress
CVE-2026-15000WordPressConnect Contact Form 7...7.2HIGHBroken Access Control in Advanced Contact Form 7 DB Plugin by WordPress
CVE-2026-57669WordPressAdvanced Contact Form ...6.5MEDIUMArbitrary File Copy Vulnerability in Contact Form Entries Plugin for WordPress
CVE-2026-9145WordPressDatabase For Contact F...6.5MEDIUMUnauthorized Data Deletion Vulnerability in Advanced Contact Form 7 - Compact DB for WordPress
CVE-2026-12094WordPressAdvanced Contact Form ...5.3MEDIUMArbitrary File Deletion Vulnerability in Contact Form Plugins for WordPress
CVE-2026-9843WordPressDatabase For Contact F...8.1HIGHArbitrary Post Deletion in Abandoned Contact Form 7 Plugin for WordPress
CVE-2026-9187WordPressAbandoned Contact Form 75.3MEDIUMUnauthenticated PHP Object Injection in Integration for Mailchimp and Contact Form 7 by WordPress
CVE-2026-49765WordPressIntegration For Mailch...9.8CRITICALUnauthenticated PHP Object Injection in Integration for Contact Form 7 by HubSpot
CVE-2026-49763WordPressIntegration For Contac...9.8CRITICALPHP Object Injection in Salesforce Integration for Various WordPress Plugins
CVE-2026-49109WordPressIntegration For Salesf...9.8CRITICALUnauthenticated PHP Object Injection Vulnerability in Contact Form 7 Integration by Constant Contact
CVE-2026-49106WordPressIntegration For Contac...9.8CRITICALUnauthenticated PHP Object Injection in WP Zendesk and Other Forms by WordPress
CVE-2026-49105WordPressWP Zendesk For Contact...👾🟡9.8CRITICALUnauthenticated PHP Object Injection in Integration for Keap/Infusionsoft and Popular WordPress Plugins
CVE-2026-49104WordPressIntegration For Keap/i...👾🟡9.8CRITICALUnauthenticated PHP Object Injection in WP Insightly for Contact Form 7 and Related Plugins
CVE-2026-49085WordPressWP Insightly For Conta...👾🟡9.8CRITICALUnauthenticated Cross Site Scripting in Drag and Drop Multiple File Upload by WordPress
CVE-2026-49055WordPressDrag And Drop Multiple...7.1HIGHUnauthenticated Cross Site Scripting in Redirection for Contact Form 7 Plugin
CVE-2026-23970WordPressRedirection For Contac...7.1HIGHUnauthenticated PHP Object Injection in Integration for ActiveCampaign and Contact Form 7 by PatchStack
CVE-2026-9691WordPressIntegration For Active...👾🟡9.8CRITICALStored Cross-Site Scripting in Drag and Drop Multiple File Upload Plugin for WordPress
CVE-2026-8991WordPressDrag And Drop Multiple...4.4MEDIUMStored Cross-Site Scripting in Freshsales Integration for WordPress
CVE-2026-8901WordPressIntegration For Freshs...7.2HIGHPayment Bypass Vulnerability in Contact Form 7 – PayPal & Stripe Add-on for WordPress
CVE-2026-9189WordPressContact Form 7 – Paypa...5.3MEDIUM