WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
contact-form-7
Published
2024-03-13
Title
Contact Form 7 < 5.9.2 - Reflected Cross-Site Scripting
Slug
contact-form-7
Published
2024-06-05
Title
Contact Form 7 < 5.9.5 - Unauthenticated Open Redirect
Slug
contact-form-7
Published
2025-04-15
Title
Contact Form 7 < 6.0.6 - Order Replay Vulnerability
Slug
contact-form-7-anti-spambot
Published
2025-01-16
Title
Contact Form 7 Anti Spambot <= 1.0.1 - Missing Authorization
Slug
contact-form-7-campaign-monitor-extension
Published
2024-09-24
Title
Contact Form 7 Campaign Monitor Extension <= 0.4.67 - Missing Authorization to Unauthenticated Arbitrary File Deletion
Slug
contact-form-7-datepicker
Published
2020-04-02
Title
Contact Form 7 Datepicker <= 2.6.0 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
contact-form-7-designer
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
contact-form-7-dynamic-text-extensio
Published
2019-07-24
Title
Contact Form 7 Dynamic Text Extension < 2.0.3 - Reflected XSS
Slug
contact-form-7-dynamic-text-extension
Published
2024-01-10
Title
Contact Form 7 – Dynamic Text Extension < 4.2.0 - Insecure Direct Object Reference
Slug
contact-form-7-dynamic-text-extension
Published
2024-11-05
Title
Contact Form 7 – Dynamic Text Extension < 4.5.1 - Information Disclosure via Shortcode
Slug
contact-form-7-dynamic-text-extension
Published
2024-12-19
Title
Contact Form 7 Dynamic Text Extension < 5.0.2 - Cross-Site Request Forgery
Slug
contact-form-7-dynamic-text-extension
Published
2025-09-26
Title
Contact Form 7 – Dynamic Text Extension <= 5.0.5 - Unauthenticated Arbitrary Shortcode Execution
Slug
contact-form-7-getresponse-extension
Published
2026-01-22
Title
Contact Form 7 GetResponse Extension <= 1.0.8 - Unauthenticated Information Exposure
Slug
contact-form-7-hide-success-message
Published
2025-06-27
Title
Contact Form – 7 : Hide Success Message <= 1.1.4 - Missing Authorization
Slug
contact-form-7-integrations
Published
2014-10-06
Title
Contact Form 7 Integrations 1.0 - 1.3.10 Multiple Cross-Site scripting (XSS)
Slug
contact-form-7-mailchimp-extension
Published
2024-01-08
Title
Contact Form 7 Extension For Mailchimp < 0.9.19 - Subscriber+ Server-Side Request Forgery
Slug
contact-form-7-mailchimp-extension
Published
2024-04-26
Title
Contact Form 7 Extension For Mailchimp < 0.9.19 - Cross-Site Request Forgery
Slug
contact-form-7-mailchimp-extension
Published
2025-12-21
Title
Contact Form 7 Extension For Mailchimp < 0.9.69 - Authenticated (Contributor+) Information Exposure
Slug
contact-form-7-multi-step-addon
Published
2024-06-24
Title
Various Plugins - Injected Backdoor
Slug
contact-form-7-multi-step-module
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
contact-form-7-multi-step-module
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
contact-form-7-multi-step-module
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
contact-form-7-multi-step-module
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
contact-form-7-newsletter
Published
2024-03-29
Title
Contact Form 7 Newsletter <= 2.2 - Reflected Cross-Site Scripting
Slug
contact-form-7-paypal-add-on
Published
2023-03-17
Title
Contact Form 7 – PayPal & Stripe Add-on < 1.9.4 - Cross-Site Request Forgery