Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
contact-form-7
WordPress
· Plugin
10 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Contact Form 7 6.2 - 6.2.3 - Unauthenticated Arbitrary File Upload
CVE-2026-114432
contact-form-7
WordPress
Critical
Fix reported
2026-11-10
Contact Form 7 6.2 - 6.2.3 - Unauthenticated Arbitrary File Upload
contact-form-7
WordPress
Critical
Fix reported
2026-11-05
Contact Form 7 <= 6.0.5 - Order Replay Vulnerability
CVE-2025-3247
contact-form-7
WordPress
Medium
Fix reported
2026-05-13
Contact Form 7 <= 5.9.4 - Unauthenticated Open Redirect
CVE-2024-4704
contact-form-7
WordPress
Medium
Fix reported
2024-07-01
Contact Form 7 <= 5.9 - Reflected Cross-Site Scripting
CVE-2024-2242
contact-form-7
WordPress
Medium
Fix reported
2024-03-14
Contact Form 7 < 3.7.2 - CAPTCHA Bypass
CVE-2014-2265
contact-form-7
WordPress
Medium
Fix reported
2024-01-22
Contact Form 7 <= 5.3.1 - Arbitrary File Upload via Bypass
CVE-2020-35489
contact-form-7
WordPress
High
Fix reported
2024-01-22
Contact Form 7 <= 3.5.2 - Arbitrary File Upload
contact-form-7
WordPress
Critical
Fix reported
2024-01-22
Contact Form 7 <= 5.8.3 - Authenticated (Editor+) Arbitrary File Upload
CVE-2023-6449
contact-form-7
WordPress
Medium
Fix reported
2024-01-22
Contact Form 7 <= 5.0.3 - Authorization Bypass
CVE-2018-20979
contact-form-7
WordPress
Medium
Fix reported
2024-01-22
