Plugin icon

Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection)

extensions-for-cf7

Vulnerabilities:

6

Last Updated:

October 4, 2026

Active Installs:

5000

Published
Title
Fixed in
CVSS
Published
2026-10-09
Title
Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) < 3.4.6 - Unauthenticated Arbitrary File Upload via Signature Field File Upload
Fixed in
Fixed in 3.4.6
CVSS
9.8 (critical)
Published
2026-01-23
Title
Extensions For CF7 < 3.4.1 - Authenticated (Contributor+) Insecure Direct Object Reference
Fixed in
Fixed in 3.4.1
CVSS
4.3 (medium)
Published
2025-07-21
Title
Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) < 3.2.9 - Unauthenticated Arbitrary File Deletion Triggered via Admin Form Submission Deletion
Fixed in
Fixed in 3.2.9
CVSS
8.1 (high)
Published
2025-01-24
Title
Extensions For CF7 < 3.2.1 - Authenticated (Admin+) Sever-Side Request Forgery
Fixed in
Fixed in 3.2.1
CVSS
3.8 (low)
Published
2024-03-15
Title
Extensions For CF7 < 3.0.7 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 3.0.7
CVSS
7.2 (high)
Published
2023-02-17
Title
Extensions For CF7 < 2.0.9 - Arbitrary Plugin Activation via CSRF
Fixed in
Fixed in 2.0.9
CVSS
4.3 (medium)