WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
cf-geoplugin
Published
2024-09-04
Title
Geo Controller < 8.7.0 - Missing Authorization to Unauthenticated Shortcode Execution
Slug
cf-geoplugin
Published
2025-12-08
Title
Geo Controller <= 8.9.4 - Unauthenticated Information Exposure
Slug
cf-image-resizing
Published
2025-08-18
Title
Cloudflare Image Resizing < 1.5.7 - Missing Authentication to Unauthenticated Remote Code Execution via rest_pre_dispatch Hook
Slug
cf-images
Published
2025-11-20
Title
Offload, AI & Optimize with Cloudflare Images < 1.9.6 - Missing Authorization
Slug
cf7-active-campaign
Published
2021-08-26
Title
Multiple Plugins from CRM Perks - Reflected Cross-Site Scripting
Slug
cf7-antispam
Published
2024-03-13
Title
AntiSpam for Contact Form 7 < 0.6.1 - Reflected Cross-Site Scripting
Slug
cf7-antispam
Published
2025-07-16
Title
AntiSpam for Contact Form 7 < 0.6.4 - Cross-Site Request Forgery
Slug
cf7-builder
Published
2025-03-11
Title
Builder for Contact Form 7 by Webconstruct <= 1.2.2 - Cross-Site Request Forgery
Slug
cf7-calendar
Published
2025-04-24
Title
Contact Form 7 Calendar <= 3.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
cf7-calendly-integration
Published
2025-01-16
Title
Form To Online Booking <= 1.0 - Reflected Cross-Site Scripting
Slug
cf7-cc-avenue-add-on
Published
2025-01-16
Title
Contact Form 7 – CCAvenue Add-on <= 1.0 - Reflected Cross-Site Scripting
Slug
cf7-conditional-fields
Published
2023-11-16
Title
Conditional Fields for Contact Form 7 < 2.4.2 - Missing Authorization
Slug
cf7-conditional-fields
Published
2024-07-19
Title
Conditional Fields for Contact Form 7 < 2.4.14 - Cross-Site Request Forgery to Plugin Setting Reset
Slug
cf7-conditional-fields
Published
2024-10-24
Title
Conditional Fields for Contact Form 7 < 2.5 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
cf7-constant-contact
Published
2021-08-26
Title
Multiple Plugins from CRM Perks - Reflected Cross-Site Scripting
Slug
cf7-constant-contact
Published
2023-11-14
Title
Integration for Contact Form 7 and Constant Contact < 1.1.5 - Open Redirect
Slug
cf7-constant-contact
Published
2024-05-27
Title
Integration for Contact Form 7 and Constant Contact < 1.1.6 - CSRF
Slug
cf7-constant-contact
Published
2025-07-30
Title
Integration for Contact Form 7 and Constant Contact < 1.1.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
cf7-constant-contact-fields-mapping
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
cf7-constant-contact-fields-mapping
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
cf7-customizer
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
cf7-customizer
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
cf7-customizer
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
cf7-database
Published
2024-03-15
Title
Database for Contact Form 7 < 3.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
cf7-dynamics-crm
Published
2025-01-27
Title
WP Dynamics CRM for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms < 1.1.7 - Reflected Cross-Site Scripting