Skip to content
Noroxi

Message Filter for Contact Form 7

cf7-message-filter · plugin

Known security vulnerabilities for Message Filter for Contact Form 7. Find out in seconds which version runs on your site with WP Lens.

7 known vulnerabilities

latest Jul 27, 2026

Vulnerabilities

  • CVE-2025-46252

    WordPress Message Filter for Contact Form 7 plugin <= 1.6.3.2 - SQL Injection vulnerability

    High 7.2

  • CVE-2026-65438

    WordPress Message Filter for Contact Form 7 plugin <= 1.6.3.9 - Cross Site Scripting (XSS) vulnerability

    High 7.1

  • CVE-2026-57423

    WordPress Message Filter for Contact Form 7 plugin <= 1.6.3.8 - Reflected Cross Site Scripting (XSS) vulnerability

    High 7.1

  • CVE-2024-54254

    WordPress Message Filter for Contact Form 7 plugin <= 1.6.3 - Broken Access Control vulnerability

    Medium 6.3

  • CVE-2024-39647

    WordPress Message Filter for Contact Form 7 plugin <= 1.6.1.1 - Cross Site Scripting (XSS) vulnerability

    Medium 6.1

  • CVE-2024-12026

    Message Filter for Contact Form 7 <= 1.6.3 - Missing Authorization to Authenticated (Subscriber+) New Filter Creation

    Medium 4.3

  • CVE-2024-12027

    Message Filter for Contact Form 7 <= 1.6.3 - Missing Authorization to Authenticated (Subscriber+) Filter Updates/Deletions

    Medium 4.3

← Back to directory