WPScan
How it worksPricing
Vulnerabilities
WordPressPluginsThemesStatsSubmit vulnerabilities
For developers
StatusAPI detailsCLI scanner
Contact

WordPress Plugin Vulnerabilities

Contact Form 7 Database Addon – CFDB7

2021-11-12
Contact Form 7 Database Addon < 1.2.6.2 - Unauthenticated Stored Cross-Site Scripting
Fixed in version 1.2.6.2
2021-11-12
Contact Form 7 Database Addon < 1.2.6.1 - Arbitrary Form Deletion via CSRF
Fixed in version 1.2.6.1
2021-01-25
Contact Form 7 Database Addon < 1.2.5.6 - CSV Injection
Fixed in version 1.2.5.6
2021-01-21
Contact Form 7 Database Addon < 1.2.5.4 - Authenticated SQL Injections
Fixed in version 1.2.5.4