Contact Form 7

contact-form-7 · плагин

Известные уязвимости для Contact Form 7. Узнайте за секунды, какая версия работает на вашем сайте, с WP Lens.

6 известных уязвимостей

2 критичных · 2 с публичным эксплойтом · последняя 16 апр. 2025 г.

Уязвимости

CVE-2020-35489
The contact-form-7 (aka Contact Form 7) plugin before 5.3.2 for WordPress allows Unrestricted File Upload and remote code execution because
Критич. 10.0
CVE-2018-20979
The contact-form-7 plugin before 5.0.4 for WordPress has privilege escalation because of capability_type mishandling in register_post_type.
Критич. 9.8
CVE-2023-6449
Contact Form 7 <= 5.8.3 - Authenticated (Editor+) Arbitrary File Upload
Высокий 7.2
CVE-2024-2242
Contact Form 7 <= 5.9 - Reflected Cross-Site Scripting
Средний 6.1
CVE-2025-3247
Contact Form 7 <= 6.0.5 - Order Replay Vulnerability
Средний 5.3
CVE-2014-2265
Rock Lobster Contact Form 7 before 3.7.2 allows remote attackers to bypass the CAPTCHA protection mechanism and submit arbitrary form data b
Средний 5.0