Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-06-17
Contact Form 7 - SQL Injection (CVE-2024-55990)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tsjippy Mollie for Contact Form 7 cf7-mollie allows Blind SQL Injection.This issue affects Mollie for Contact Form 7: from n/a through
PLUGIN
Contact Form 7
CVE-2024-55990
Risk Score
Threat Entry
Updated 2026-06-17
Contact Form 7 - Cross-Site Scripting (XSS) (CVE-2024-54343)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in thehowarde Connect Contact Form 7 to Constant Contact connect-contact-form-7-to-constant-contact-v3 allows Reflected XSS.This issue affects Connect Contact Form 7 to Constant Contact: from n/a through
PLUGIN
Contact Form 7
CVE-2024-54343
Risk Score
Threat Entry
Updated 2026-06-17
Contact Form 7 - Broken Access Control (CVE-2023-39920)
Missing Authorization vulnerability in Themeisle Redirection for Contact Form 7 wpcf7-redirect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Redirection for Contact Form 7: from n/a through
PLUGIN
Contact Form 7
CVE-2023-39920
Risk Score
Threat Entry
Updated 2026-06-17
Contact Form 7 - Broken Access Control (CVE-2024-54254)
Missing Authorization vulnerability in Kofi Mokome Message Filter for Contact Form 7 cf7-message-filter.This issue affects Message Filter for Contact Form 7: from n/a through
PLUGIN
Contact Form 7
CVE-2024-54254
Risk Score
Threat Entry
Updated 2026-06-17
Contact Form 7 - Broken Access Control (CVE-2023-47830)
Missing Authorization vulnerability in Addons for Contact Form 7 Live Preview for Contact Form 7 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Live Preview for Contact Form 7: from n/a through 1.2.0.
PLUGIN
Contact Form 7
CVE-2023-47830
Risk Score
Threat Entry
Updated 2026-06-17
Contact Form 7 - Cross-Site Scripting (XSS) (CVE-2024-10683)
The Contact Form 7 – PayPal & Stripe Add-on plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.3.1. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. This is only exploitable when the leave a review notice is present in the dashboard.
PLUGIN
Contact Form 7
CVE-2024-10683
Risk Score
Threat Entry
Updated 2026-06-17
Contact Form 7 - Information Disclosure (CVE-2024-10084)
The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to Basic Information Disclosure in all versions up to, and including, 4.5 via the CF7_get_post_var shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract the titles and text contents of private and password-protected posts, they do not own.
PLUGIN
Contact Form 7
CVE-2024-10084
Risk Score
Threat Entry
Updated 2026-06-17
Contact Form 7 - Cross-Site Scripting (XSS) (CVE-2024-50412)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jules Colle Conditional Fields for Contact Form 7 cf7-conditional-fields allows Stored XSS.This issue affects Conditional Fields for Contact Form 7: from n/a through
PLUGIN
Contact Form 7
CVE-2024-50412
Risk Score
Threat Entry
Updated 2026-06-17
Contact Form 7 - Cross-Site Scripting (XSS) (CVE-2024-48021)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scott Paterson Contact Form 7 – PayPal & Stripe Add-on contact-form-7-paypal-add-on allows Reflected XSS.This issue affects Contact Form 7 – PayPal & Stripe Add-on: from n/a through
PLUGIN
Contact Form 7
CVE-2024-48021
Risk Score
Threat Entry
Updated 2026-06-17
Contact Form 7 - Cross-Site Scripting (XSS) (CVE-2024-38724)
Cross-Site Request Forgery (CSRF), Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Muhammad Rehman Contact Form 7 Summary and Print allows Stored XSS.This issue affects Contact Form 7 Summary and Print: from n/a through 1.2.5.
PLUGIN
Contact Form 7
CVE-2024-38724
Risk Score
Threat Entry
Updated 2026-06-17
Contact Form 7 - Information Disclosure (CVE-2024-37498)
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pauple Table & Contact Form 7 Database – Tablesome.This issue affects Table & Contact Form 7 Database – Tablesome: from n/a through 1.0.33.
PLUGIN
Contact Form 7
CVE-2024-37498
Risk Score
Threat Entry
Updated 2026-06-17
Contact Form 7 - Open Redirect (CVE-2024-4704)
The Contact Form 7 WordPress plugin before 5.9.5 has an open redirect that allows an attacker to utilize a false URL and redirect to the URL of their choosing.
PLUGIN
Contact Form 7
CVE-2024-4704
Risk Score
Threat Entry
Updated 2026-06-17
Contact Form 7 - Broken Access Control (CVE-2024-34826)
Missing Authorization vulnerability in Saleswonder Team: Tobias CF7 WOW Styler cf7-styler.This issue affects CF7 WOW Styler: from n/a through
PLUGIN
Contact Form 7
CVE-2024-34826
Risk Score
Threat Entry
Updated 2026-06-17
Contact Form 7 - Security Vulnerability (CVE-2023-45009)
Improper Restriction of Excessive Authentication Attempts vulnerability in Forge12 Interactive GmbH Captcha/Honeypot for Contact Form 7 allows Functionality Bypass.This issue affects Captcha/Honeypot for Contact Form 7: from n/a through 1.11.3.
PLUGIN
Contact Form 7
CVE-2023-45009
Risk Score
Threat Entry
Updated 2026-06-17
Contact Form 7 - Cross-Site Request Forgery (CSRF) (CVE-2024-35632)
Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks. Integration for Contact Form 7 and Constant Contact.This issue affects Integration for Contact Form 7 and Constant Contact: from n/a through 1.1.5.
PLUGIN
Contact Form 7
CVE-2024-35632
Risk Score
Threat Entry
Updated 2026-06-17
Contact Form 7 - Cross-Site Request Forgery (CSRF) (CVE-2024-34756)
Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for Contact Form 7 HubSpot.This issue affects Integration for Contact Form 7 HubSpot: from n/a through 1.3.1.
PLUGIN
Contact Form 7
CVE-2024-34756
Risk Score
Threat Entry
Updated 2026-06-17
Contact Form 7 - Cross-Site Request Forgery (CSRF) (CVE-2024-34755)
Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for Contact Form 7 and Salesforce.This issue affects Integration for Contact Form 7 and Salesforce: from n/a through 1.3.9.
PLUGIN
Contact Form 7
CVE-2024-34755
Risk Score
Threat Entry
Updated 2026-06-17
Contact Form 7 - Privilege Escalation (CVE-2023-23990)
Improper Privilege Management vulnerability in Qube One Ltd. Redirection for Contact Form 7 wpcf7-redirect allows Privilege Escalation.This issue affects Redirection for Contact Form 7: from n/a through 2.7.0.
PLUGIN
Contact Form 7
CVE-2023-23990
Risk Score
Threat Entry
Updated 2026-06-17
Contact Form 7 - Cross-Site Request Forgery (CSRF) (CVE-2024-34817)
Cross-Site Request Forgery (CSRF) vulnerability in CRM Perks Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms.This issue affects Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms: from n/a through 1.2.0.
PLUGIN
Contact Form 7
CVE-2024-34817
Risk Score
Threat Entry
Updated 2026-06-17
Contact Form 7 - Cross-Site Request Forgery (CSRF) (CVE-2024-33677)
Cross-Site Request Forgery (CSRF) vulnerability in Renzo Johnson Contact Form 7 Extension For Mailchimp.This issue affects Contact Form 7 Extension For Mailchimp: from n/a through 0.5.70.
PLUGIN
Contact Form 7
CVE-2024-33677
Risk Score