WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
contact-form-7-mailchimp-extension
Published
2025-12-21
Title
Contact Form 7 Extension For Mailchimp < 0.9.69 - Authenticated (Contributor+) Information Exposure
Slug
contact-form-7-mailchimp-extension
Published
2026-07-08
Title
Connect Contact Form 7 and Mailchimp < 0.9.78.07 - Unauthenticated Stored Cross-Site Scripting via Mailchimp Merge Field Values
Slug
contact-form-7-multi-step-addon
Published
2024-06-24
Title
Various Plugins - Injected Backdoor
Slug
contact-form-7-multi-step-module
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
contact-form-7-multi-step-module
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
contact-form-7-multi-step-module
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
contact-form-7-multi-step-module
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
contact-form-7-newsletter
Published
2024-03-29
Title
Contact Form 7 Newsletter <= 2.2 - Reflected Cross-Site Scripting
Slug
contact-form-7-paypal-add-on
Published
2023-03-17
Title
Contact Form 7 – PayPal & Stripe Add-on < 1.9.4 - Cross-Site Request Forgery
Slug
contact-form-7-paypal-add-on
Published
2024-02-27
Title
Easy PayPal & Stripe Buy Now Button <= 1.8.3 & Contact Form 7 – PayPal & Stripe Add-on <= 2.1 - Cross-Site Request Forgery to Settings Update
Slug
contact-form-7-paypal-add-on
Published
2024-03-16
Title
Contact Form 7 – PayPal & Stripe Add-on < 2.1 - Reflected Cross-Site Scripting
Slug
contact-form-7-paypal-add-on
Published
2024-10-08
Title
Contact Form 7 – PayPal & Stripe Add-on < 2.3.1 - Reflected Cross-Site Scripting
Slug
contact-form-7-paypal-add-on
Published
2024-11-08
Title
Contact Form 7 - PayPal & Stripe Add-on < 2.3.2 - Reflected Cross-Site Scripting
Slug
contact-form-7-paypal-add-on
Published
2025-05-07
Title
Contact Form 7 – PayPal & Stripe Add-on < 2.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
contact-form-7-paypal-add-on
Published
2026-05-28
Title
Contact Form 7 – PayPal & Stripe Add-on < 2.4.10 - Unauthenticated Payment Bypass via Insufficient Verification of Data Authenticity via PayPal IPN Handler ('invoice'/'mc_gross' Verification)
Slug
contact-form-7-paypal-add-on
Published
2026-07-06
Title
Contact Form 7 – PayPal & Stripe Add-on < 2.5 - Open Redirect
Slug
contact-form-7-paypal-add-on
Published
2026-08-11
Title
Contact Form 7 – PayPal & Stripe Add-on < 2.5.2 - Missing Authorization
Slug
contact-form-7-paypal-extension
Published
2026-03-01
Title
Accept PayPal Payments using Contact Form 7 <= 4.0.5 - Missing Authorization
Slug
contact-form-7-recaptcha
Published
2025-07-04
Title
Contact Form 7 reCAPTCHA <= 1.2.0 - Cross-Site Request Forgery
Slug
contact-form-7-recaptcha
Published
2025-08-22
Title
Contact Form 7 reCAPTCHA <= 1.2.0 - Reflected XSS via $_SERVER['REQUEST_URI']
Slug
contact-form-7-round-robin-lead-distribution
Published
2025-01-16
Title
Contact Form 7 Round Robin Lead Distribution <= 1.2.1 - Authenticated (Administrator+) SQL Injection
Slug
contact-form-7-round-robin-lead-distribution
Published
2025-01-16
Title
Contact Form 7 Round Robin Lead Distribution <= 1.2.1 - Reflected Cross-Site Scripting
Slug
contact-form-7-select-box-editor-button
Published
2025-03-11
Title
Contact Form 7 Select Box Editor Button <= 0.6 - Cross-Site Request Forgery
Slug
contact-form-7-simple-recaptcha
Published
2021-07-26
Title
Contact Form 7 Captcha < 0.0.9 - CSRF to Stored XSS
Slug
contact-form-7-simple-recaptcha
Published
2022-06-27
Title
Contact Form 7 Captcha < 0.1.2 - Reflected Cross-Site Scripting