WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
cf7-conditional-fields
Published
2023-11-16
Title
Conditional Fields for Contact Form 7 < 2.4.2 - Missing Authorization
Slug
cf7-conditional-fields
Published
2024-07-19
Title
Conditional Fields for Contact Form 7 < 2.4.14 - Cross-Site Request Forgery to Plugin Setting Reset
Slug
cf7-conditional-fields
Published
2024-10-24
Title
Conditional Fields for Contact Form 7 < 2.5 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
cf7-constant-contact
Published
2021-08-26
Title
Multiple Plugins from CRM Perks - Reflected Cross-Site Scripting
Slug
cf7-constant-contact
Published
2023-11-14
Title
Integration for Contact Form 7 and Constant Contact < 1.1.5 - Open Redirect
Slug
cf7-constant-contact
Published
2024-05-27
Title
Integration for Contact Form 7 and Constant Contact < 1.1.6 - CSRF
Slug
cf7-constant-contact
Published
2025-07-30
Title
Integration for Contact Form 7 and Constant Contact < 1.1.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
cf7-constant-contact-fields-mapping
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
cf7-constant-contact-fields-mapping
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
cf7-customizer
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
cf7-customizer
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
cf7-customizer
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
cf7-database
Published
2024-03-15
Title
Database for Contact Form 7 < 3.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cf7-dynamics-crm
Published
2025-01-27
Title
WP Dynamics CRM for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms < 1.1.7 - Reflected Cross-Site Scripting
Slug
cf7-easy-math-captcha
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
cf7-editor-button
Published
2025-07-07
Title
Contact Form 7 Editor Button <= 1.0.0 - Reflected Cross-Site Scripting
Slug
cf7-email-add-on
Published
2024-11-20
Title
Contact Form 7 Email Add on <= 1.9 - Authenticated (Contributor+) Local File Inclusion
Slug
cf7-field-validation
Published
2023-08-17
Title
Contact form 7 Custom validation <= 1.1.3 - Unauthenticated SQLi
Slug
cf7-file-download
Published
2024-04-26
Title
CF7 File Download – File Download for CF7 <= 2.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
cf7-google-sheets-connector
Published
2023-06-12
Title
CF7 Google Sheets Connector (Free < 5.0.2, Pro < 2.3.7) - Reflected XSS
Slug
cf7-google-sheets-connector
Published
2023-11-30
Title
CF7 Google Sheets Connector < 5.0.6 - Unauthenticated Sensitive Information Exposure via Debug Log
Slug
cf7-google-sheets-connector
Published
2024-06-07
Title
CF7 Google Sheets Connector < 5.0.10 - Missing Authorization to Limited Site Configuration Update
Slug
cf7-google-sheets-connector
Published
2025-01-31
Title
CF7 Google Sheets Connector < 5.0.18 - Missing Authorization
Slug
cf7-google-sheets-connector-pro
Published
2023-06-12
Title
CF7 Google Sheets Connector (Free < 5.0.2, Pro < 2.3.7) - Reflected XSS
Slug
cf7-grid-and-styler-for-divi
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius