Plugin icon

Advanced Contact form 7 DB

advanced-cf7-db
Plugin closed

Vulnerabilities:

11

Last Updated:

July 21, 2026

Active Installs:

70000

Published
Title
Fixed in
CVSS
Published
2026-09-22
Title
Advanced Contact form 7 DB < 2.1.2 - Missing Authorization to Authenticated (Contributor+) Information Disclosure via 'acf7db' Shortcode
Fixed in
Fixed in 2.1.2
CVSS
4.9 (medium)
Published
2026-09-09
Title
Advanced Contact form 7 DB <= 2.1.3 - Missing Authorization to Authenticated (Custom+) Unauthorized Data Import via 'import_cf7_id'
Fixed in
No known fix
CVSS
4.3 (medium)
Published
2026-06-30
Title
Advanced Contact form 7 DB < 2.1.0 - Missing Authorization
Fixed in
Fixed in 2.1.0
CVSS
4.3 (medium)
Published
2026-04-08
Title
Advanced CF7 DB < 2.1.0 - Cross-Site Request Forgery to Form Entry Deletion
Fixed in
Fixed in 2.1.0
CVSS
5.4 (medium)
Published
2026-04-08
Title
Advanced CF7 DB < 2.1.0 - Missing Authorization to Authenticated (Subscriber+) Form Submissions Excel Export
Fixed in
Fixed in 2.1.0
CVSS
4.3 (medium)
Published
2024-06-10
Title
Advanced Contact form 7 DB < 2.0.3 - Missing Authorization to Unauthenticated Information Disclosure
Fixed in
Fixed in 2.0.3
CVSS
5.3 (medium)
Published
2024-06-10
Title
Advanced Contact form 7 DB < 2.0.3 - Sensitive Information Exposure
Fixed in
Fixed in 2.0.3
CVSS
5.3 (medium)
Published
2022-04-21
Title
Advanced Contact form 7 DB < 1.8.8 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 1.8.8
CVSS
6.1 (medium)
Published
2022-02-22
Title
Advanced Contact form 7 DB < 1.8.7 - Subscriber+ Arbitrary File Deletion
Fixed in
Fixed in 1.8.7
CVSS
8.1 (high)
Published
2019-07-26
Title
Advanced Contact form 7 DB < 1.7.1 - SQL Injection
Fixed in
Fixed in 1.7.1
CVSS
9.8 (critical)
Published
2019-04-11
Title
Advanced Contact form 7 DB <= 1.6.0 - Authenticated SQL Injection
Fixed in
Fixed in 1.6.1
CVSS
n/a