Plugin icon

Message Filter for Contact Form 7

cf7-message-filter

Vulnerabilities:

8

Last Updated:

September 11, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2026-07-27
Title
Message Filter for Contact Form 7 < 1.6.4.0 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 1.6.4.0
CVSS
7.2 (high)
Published
2026-07-08
Title
Message Filter for Contact Form 7 < 1.6.3.9 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.6.3.9
CVSS
6.1 (medium)
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Fixed in
Fixed in 1.6.3.3
CVSS
7.1 (high)
Published
2025-04-22
Title
Message Filter for Contact Form 7 < 1.6.33 - Authenticated (Administrator+) SQL Injection
Fixed in
Fixed in 1.6.33
CVSS
4.9 (medium)
Published
2024-12-06
Title
Message Filter for Contact Form 7 < 1.6.3.1 - Subscriber+ Filter Creation
Fixed in
Fixed in 1.6.3.1
CVSS
4.3 (medium)
Published
2024-12-05
Title
Message Filter for Contact Form 7 < 1.6.3.1 - Subscriber+ Filter Updates/Deletions
Fixed in
Fixed in 1.6.3.1
CVSS
4.3 (medium)
Published
2024-08-01
Title
Message Filter for Contact Form 7 < 1.6.2 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.6.2
CVSS
6.1 (medium)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.4.3
CVSS
6.1 (medium)