Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how contact form 7 compares to other vendors in security performance

View Risk Score →

Contact Form 7 CF7 DatabaseDatabase for CF7 <= 1.2.6 - Unauthenticated Stored Cross-Site Scripting via Array Form Field Values

Risk 44
Severity
7.2
First published (updated )
CVE-2026-13425

Contact Form 7 WordPress plugin "PayPal & Stripe Add-on"Contact Form 7 – PayPal & Stripe Add-on < 2.5 - Open Redirect

Risk 24
Severity
4.7
First published (updated )
CVE-2026-14236

Contact Form 7 AWeber ExtensionContact Form 7 AWeber Extension <= 0.1.42 - Missing Authorization to Authenticated (Subscriber+) Log Reset

Risk 22
Severity
4.3
First published (updated )
CVE-2025-12167

Tablesome Contact Form DBTablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent <= 1.1.32 - Unauthenticated Arbitrary File Upload

Risk 86
Severity
9.8
First published (updated )
CVE-2025-11499

Contact Form 7 Redirection for Contact Form 7Redirection for Contact Form 7 <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via qs_date Shortcode

Risk 28
Severity
6.4
EPSS
0.04%
First published (updated )
CVE-2025-9562
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Contact Form 7 reCAPTCHAContact Form 7 reCAPTCHA <= 1.2.0 - Reflected XSS via $_SERVER['REQUEST_URI']

Risk 43
Severity
5.8
First published (updated )
CVE-2025-8280

Contact Form 7 Database AddonContact Form 7 Database Addon <= 1.3.1 - Unauthenticated Stored Cross-Site Scripting via tmpD Parameter

Risk 27
Severity
6.1
EPSS
0.13%
First published (updated )
CVE-2025-6740

Contact Form 7 Contact Form 7Contact Form 7 <= 6.0.5 - Order Replay Vulnerability

Risk 19
Severity
5.3
EPSS
0.01%
First published (updated )
CVE-2025-3247

Contact Form 7 Drag and Drop Multiple File Upload for Contact Form 7Drag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.7 - Unauthenticated Arbitrary File Deletion

Risk 77
Severity
8.8
First published (updated )
CVE-2025-2328

Contact Form 7 Redirect & Thank You PageContact Form 7 Redirect & Thank You Page <= 1.0.7 - Reflected Cross-Site Scripting

Risk 38
Severity
6.1
First published (updated )
CVE-2024-12423
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Contact Form 7 Message Filter for Contact Form 7Message Filter for Contact Form 7 <= 1.6.3 - Missing Authorization to Authenticated (Subscriber+) Filter Updates/Deletions

Risk 22
Severity
4.3
First published (updated )
CVE-2024-12027

Contact Form 7 PayPal & Stripe Add-onContact Form 7 - PayPal & Stripe Add-on <= 2.3.1 - Reflected Cross-Site Scripting

Risk 38
Severity
6.1
First published (updated )
CVE-2024-10683

Contact Form 7 Contact Form 7 + TelegramContact Form 7 + Telegram <= 0.8.5 - Missing Authorization to Authenticated (Subscriber+) Subscription Approve/Pause/Refuse

Risk 25
Severity
5.4
EPSS
0.04%
First published (updated )
CVE-2024-9629

Contact Form 7 Repeatable FieldsContact Form 7 - Repeatable Fields <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via field_group Shortcode

Risk 39
Severity
6.4
First published (updated )
CVE-2024-10180

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203