WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
cf7-material-design
Published
2025-03-24
Title
Contact Form 7 Material Design <= 1.0.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
cf7-message-filter
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
cf7-message-filter
Published
2024-08-01
Title
Message Filter for Contact Form 7 < 1.6.2 - Reflected Cross-Site Scripting
Slug
cf7-message-filter
Published
2024-12-05
Title
Message Filter for Contact Form 7 < 1.6.3.1 - Subscriber+ Filter Updates/Deletions
Slug
cf7-message-filter
Published
2024-12-06
Title
Message Filter for Contact Form 7 < 1.6.3.1 - Subscriber+ Filter Creation
Slug
cf7-message-filter
Published
2025-04-22
Title
Message Filter for Contact Form 7 < 1.6.33 - Authenticated (Administrator+) SQL Injection
Slug
cf7-message-filter
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
cf7-mollie
Published
2024-12-06
Title
Mollie for Contact Form 7 <= 5.0.0 - Reflected Cross-Site Scripting
Slug
cf7-mollie
Published
2024-12-14
Title
Mollie for Contact Form 7 <= 5.0.0 - Authenticated (Administrator+) SQL Injection
Slug
cf7-multi-step
Published
2024-09-26
Title
Multi Step for Contact Form < 2.7.8 - Unauthenticated SQL Injection
Slug
cf7-paystack-add-on
Published
2025-01-16
Title
Contact Form 7 – Paystack Add-on <= 1.2.3 - Reflected Cross-Site Scripting
Slug
cf7-recaptcha-mine
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
cf7-redirect-thank-you-page
Published
2023-03-15
Title
Contact Form 7 Redirect & Thank You Page < 1.0.4 - Cross-Site Request Forgery
Slug
cf7-redirect-thank-you-page
Published
2024-11-11
Title
Contact Form 7 Redirect & Thank You Page < 1.0.7 - Reflected Cross-Site Scripting
Slug
cf7-redirect-thank-you-page
Published
2025-01-14
Title
Contact Form 7 Redirect & Thank You Page < 1.0.8 - Reflected Cross-Site Scripting
Slug
cf7-repeatable-fields
Published
2024-10-23
Title
Contact Form 7 - Repeatable Fields < 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via field_group Shortcode
Slug
cf7-reply-manager
Published
2024-11-13
Title
CF7 Reply Manager <= 1.2.3 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
cf7-salesforce
Published
2021-08-26
Title
Multiple Plugins from CRM Perks - Reflected Cross-Site Scripting
Slug
cf7-salesforce
Published
2024-05-14
Title
Integration for Contact Form 7 and Salesforce <= <=1.3.9 - Cross-Site Request Forgery
Slug
cf7-salesforce
Published
2025-05-29
Title
Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms < 1.4.5 - Unauthenticated Full Path Disclosure
Slug
cf7-salesforce
Published
2025-12-08
Title
Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms < 1.4.7 - Missing Authorization
Slug
cf7-spreadsheets
Published
2025-04-03
Title
CF7 Spreadsheets <= 2.3.2 - Reflected Cross-Site Scripting
Slug
cf7-spreadsheets
Published
2025-03-31
Title
CF7 Spreadsheets <= 2.3.2 - Missing Authorization to Settings Update
Slug
cf7-spreadsheets
Published
2025-08-11
Title
CF7 Spreadsheets <= 2.3.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
cf7-store-to-db-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes