Skip to content
Noroxi

Contact Form 7 Database Addon – CFDB7 (WordPress plugin)

contact-form-cfdb7 · plugin

Known security vulnerabilities for Contact Form 7 Database Addon – CFDB7 (WordPress plugin). Find out in seconds which version runs on your site with WP Lens.

5 known vulnerabilities

1 critical · latest Oct 28, 2025

Vulnerabilities

  • CVE-2025-4665

    WordPress plugin Contact Form CFDB7 versions up to and including 1.3.2 are affected by a pre-authentication SQL injection vulnerability that

    Critical 9.6

  • CVE-2021-36886

    WordPress Contact Form 7 Database Addon – CFDB7 plugin <= 1.2.5.9 - Cross-Site Request Forgery (CSRF) vulnerability

    High 8.8

  • CVE-2025-6740

    Contact Form 7 Database Addon <= 1.3.1 - Unauthenticated Stored Cross-Site Scripting via tmpD Parameter

    Medium 6.1

  • CVE-2021-36885

    WordPress Contact Form 7 Database Addon – CFDB7 plugin <= 1.2.6.1 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

    Medium 6.1

  • CVE-2024-3870

    Contact Form 7 Database Addon – CFDB7 <= 1.2.6.8 - Unauthenticated Sensitive Information Exposure

    Medium 5.3

← Back to directory