Contact Form 7 – Dynamic Text Extension

contact-form-7-dynamic-text-extension · plugin

Known security vulnerabilities for Contact Form 7 – Dynamic Text Extension. Find out in seconds which version runs on your site with WP Lens.

6 known vulnerabilities

latest Aug 5, 2026

Vulnerabilities

CVE-2025-13146
Contact Form 7 – Dynamic Text Extension <= 5.0.7 - Unauthenticated Arbitrary Shortcode Execution
Medium 6.5
CVE-2025-63068
WordPress Contact Form 7 Dynamic Text Extension plugin <= 5.0.5 - Content Injection vulnerability
Medium 5.3
CVE-2026-5116
Contact Form 7 – Dynamic Text Extension <= 5.0.5 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium 4.4
CVE-2024-56218
WordPress Contact Form 7 - Dynamic Text Extension plugin <= 5.0.1 - Cross Site Request Forgery (CSRF) vulnerability
Medium 4.3
CVE-2024-10084
Contact Form 7 – Dynamic Text Extension <= 4.5 - Information Disclosure via Shortcode
Medium 4.3
CVE-2023-6630
Contact Form 7 – Dynamic Text Extension <= 4.1.0 - Insecure Direct Object Reference
Medium 4.3