WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
cf7-redirect-thank-you-page
Published
2025-01-14
Title
Contact Form 7 Redirect & Thank You Page < 1.0.8 - Reflected Cross-Site Scripting
Slug
cf7-repeatable-fields
Published
2024-10-23
Title
Contact Form 7 - Repeatable Fields < 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via field_group Shortcode
Slug
cf7-reply-manager
Published
2024-11-13
Title
CF7 Reply Manager <= 1.2.3 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
cf7-salesforce
Published
2021-08-26
Title
Multiple Plugins from CRM Perks - Reflected Cross-Site Scripting
Slug
cf7-salesforce
Published
2024-05-14
Title
Integration for Contact Form 7 and Salesforce <= <=1.3.9 - Cross-Site Request Forgery
Slug
cf7-salesforce
Published
2025-05-29
Title
Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms < 1.4.5 - Unauthenticated Full Path Disclosure
Slug
cf7-salesforce
Published
2025-12-08
Title
Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms < 1.4.7 - Missing Authorization
Slug
cf7-spreadsheets
Published
2025-04-03
Title
CF7 Spreadsheets <= 2.3.2 - Reflected Cross-Site Scripting
Slug
cf7-spreadsheets
Published
2025-03-31
Title
CF7 Spreadsheets <= 2.3.2 - Missing Authorization to Settings Update
Slug
cf7-spreadsheets
Published
2025-08-11
Title
CF7 Spreadsheets <= 2.3.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
cf7-store-to-db-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
cf7-store-to-db-lite
Published
2022-01-17
Title
Form Store to DB < 1.1.1 - Unauthenticated Stored Cross-Site Scripting
Slug
cf7-styler
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
cf7-styler
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
cf7-styler
Published
2024-05-09
Title
Design for Contact Form 7 Style WordPress Plugin – CF7 WOW Styler < 1.6.5 - Missing Authorization via Several AJAX Action
Slug
cf7-styler
Published
2024-11-12
Title
CF7 WOW Styler < 1.6.9 - Reflected XSS
Slug
cf7-styler
Published
2024-11-04
Title
CF7 WOW Styler < 1.6.9 - Reflected Cross-Site Scripting
Slug
cf7-styler
Published
2025-01-06
Title
Design for Contact Form 7 Style WordPress Plugin – CF7 WOW Styler <= 1.7.1 - Unauthenticated Arbitrary Shortcode Execution and Reflected Cross-Site Scripting
Slug
cf7-styler
Published
2025-08-07
Title
CF7 WOW Styler < 1.7.3 - Unauthenticated Local File Inclusion
Slug
cf7-styler-for-divi
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
cf7-styler-for-divi
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
cf7-submission-dom-tracking
Published
2025-05-07
Title
Submission DOM tracking for Contact Form 7 < 2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
cf7-submissions
Published
2025-09-22
Title
CF7 Submissions <= 0.26 - Missing Authorization
Slug
cf7-summary-and-print
Published
2024-07-11
Title
Contact Form 7 Summary and Print < 1.2.6 - Settings Update via CSRF
Slug
cf7-sweet-alert-popup
Published
2025-08-20
Title
Popup for CF7 with Sweet Alert <= 1.6.5 - Cross-Site Request Forgery