Plugin icon

Contact Form 7 Database Addon – CFDB7

contact-form-cfdb7

Vulnerabilities:

7

Last Updated:

November 29, 2025

Active Installs:

600000

Published
Title
Fixed in
CVSS
Published
2025-07-03
Title
Contact Form 7 Database Addon < 1.3.2 - Unauthenticated Stored XSS via tmpD Parameter
Fixed in
Fixed in 1.3.2
CVSS
6.1 (medium)
Published
2024-04-26
Title
Contact Form 7 Database Addon – CFDB7 < 1.2.7 - Unauthenticated Sensitive Information Exposure
Fixed in
Fixed in 1.2.7
CVSS
5.3 (medium)
Published
2022-10-27
Title
Contact Form 7 Database Addon < 1.2.6.5 - CSV Injection
Fixed in
Fixed in 1.2.6.5
CVSS
2.2 (low)
Published
2021-11-12
Title
Contact Form 7 Database Addon < 1.2.6.2 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 1.2.6.2
CVSS
6.1 (medium)
Published
2021-11-12
Title
Contact Form 7 Database Addon < 1.2.6.1 - Arbitrary Form Deletion via CSRF
Fixed in
Fixed in 1.2.6.1
CVSS
6.5 (medium)
Published
2021-01-25
Title
Contact Form 7 Database Addon < 1.2.5.6 - CSV Injection
Fixed in
Fixed in 1.2.5.6
CVSS
4.7 (medium)
Published
2021-01-21
Title
Contact Form 7 Database Addon < 1.2.5.4 - Authenticated SQL Injections
Fixed in
Fixed in 1.2.5.4
CVSS
9.1 (critical)