WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
contact-form-7-to-database-extension
Published
2018-04-09
Title
Contact Form 7 to Database Extension 2.10.32 - CSV Injection
Slug
contact-form-7-with-chatwork
Published
2025-12-11
Title
Contact Form 7 with ChatWork <= 1.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'api_token' and 'roomid' Settings
Slug
contact-form-add
Published
2021-08-09
Title
Form Builder 1.9.8.4 - Reflected Cross-Site Scripting (XSS)
Slug
contact-form-add
Published
2021-08-09
Title
Form Builder < 1.9.8.4 - Authenticated Stored Cross-Site Scripting
Slug
contact-form-add
Published
2023-06-19
Title
Form Builder <= 1.9.9.0 - CSRF
Slug
contact-form-advanced-database
Published
2021-11-15
Title
Contact Form Advanced Database <= 1.0.8 - Unauthorised AJAX Calls
Slug
contact-form-builder
Published
2015-07-07
Title
Contact Form Builder <= 1.0.24 - Authenticated Blind SQL Injection
Slug
contact-form-builder
Published
2019-04-23
Title
Contact Form Builder <= 1.0.68 - CSRF to LFI
Slug
contact-form-builder
Published
2023-10-23
Title
WDContactFormBuilder <= 1.0.72 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
contact-form-by-supsystic
Published
2021-02-08
Title
Contact Form by Supsystic < 1.7.7 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
contact-form-by-supsystic
Published
2021-02-08
Title
Contact Form by Supsystic < 1.7.11 - Authenticated SQL Injections
Slug
contact-form-by-supsystic
Published
2021-04-19
Title
Contact Form by Supsystic < 1.7.15 - Reflected Cross-Site scripting (XSS)
Slug
contact-form-by-supsystic
Published
2021-10-28
Title
Contact Form by Supsystic < 1.7.20 - Admin+ Stored Cross-Site Scripting
Slug
contact-form-by-supsystic
Published
2023-05-16
Title
Contact Form by Supsystic < 1.7.25 - CSRF
Slug
contact-form-by-supsystic
Published
2023-10-03
Title
Contact Form by Supsystic < 1.7.28 - CSRF
Slug
contact-form-by-supsystic
Published
2024-10-13
Title
Contact Form by Supsystic < 1.7.29 - Authenticated (Admin+) Remote Code Execution
Slug
contact-form-by-supsystic
Published
2024-10-14
Title
Contact Form by Supsystic < 1.7.29 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
contact-form-by-supsystic
Published
2025-04-15
Title
Contact Form by Supsystic < 1.7.30 - Cross-Site Request Forgery to Stored Cross-Site Scripting via saveAsCopy AJAX Action
Slug
contact-form-by-supsystic
Published
2025-08-18
Title
Contact Form by Supsystic <= 1.7.36 - Reflected XSS
Slug
contact-form-by-supsystic
Published
2026-03-30
Title
Contact Form by Supsystic < 1.8.0 - Unauthenticated Server-Side Template Injection via Prefill Functionality
Slug
contact-form-cfdb7
Published
2021-01-21
Title
Contact Form 7 Database Addon < 1.2.5.4 - Authenticated SQL Injections
Slug
contact-form-cfdb7
Published
2021-01-25
Title
Contact Form 7 Database Addon < 1.2.5.6 - CSV Injection
Slug
contact-form-cfdb7
Published
2021-11-12
Title
Contact Form 7 Database Addon < 1.2.6.2 - Unauthenticated Stored Cross-Site Scripting
Slug
contact-form-cfdb7
Published
2021-11-12
Title
Contact Form 7 Database Addon < 1.2.6.1 - Arbitrary Form Deletion via CSRF
Slug
contact-form-cfdb7
Published
2022-10-27
Title
Contact Form 7 Database Addon < 1.2.6.5 - CSV Injection