Contact Form 7 Database Addon – CFDB7

Information

Software Type Plugin
Software Slug contact-form-cfdb7 (view on wordpress.org)
Software Status Active
Software Author arshidkv12
Software Website ciphercoin.com
Software Downloads 5,158,968
Software Active Installs 600,000
Software Record Last Updated May 27, 2024

6 Vulnerabilities

Title Status CVE ID CVSS Researchers Date
Contact Form 7 Database Addon – CFDB7 <= 1.2.6.8 - Unauthenticated Sensitive Information Exposure Patched CVE-2024-3870 5.3 Tim Coen April 26, 2024
Contact Form 7 Database Addon <= 1.2.6.3 - CSV Injection Patched CVE-2022-3634 7.2 Adel Bouaricha October 27, 2022
Contact Form 7 Database Addon – CFDB7 plugin <= 1.2.5.9 - Cross-Site Request Forgery Patched CVE-2021-36886 6.5 Vladislav Pokrovsky (ΞX.MI) November 12, 2021
Contact Form 7 Database Addon – CFDB7 <= 1.2.6.1 - Unauthenticated Stored Cross-Site Scripting Patched CVE-2021-36885 6.1 Vladislav Pokrovsky (ΞX.MI) November 12, 2021
Contact Form 7 Database Addon <= 1.2.5.4 - CSV Injection Patched CVE-2021-24144 8.8 SunCSR-thiennv January 25, 2021
Contact Form 7 Database Addon <= 1.2.5.3 - SQL Injection Patched 8.8 January 19, 2021

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation