Database for Contact Form 7, WPforms, Elementor forms

Уязвимости

• CVE-2026-2599без авторизации≤ 1.4.7

  Database for Contact Form 7, WPforms, Elementor forms <= 1.4.7 - Unauthenticated PHP Object Injection via 'download_csv'

  Критич. 9.8

• CVE-2025-7384без авторизации≤ 1.4.3

  Database for Contact Form 7, WPforms, Elementor forms <= 1.4.3 - Unauthenticated PHP Object Injection to Arbitrary File Deletion

  Критич. 9.8

• CVE-2023-31212нужен вход≤ 1.3.0

  WordPress Contact Form Entries Plugin <= 1.3.0 is vulnerable to SQL Injection

  Критич. 9.8

• CVE-2026-9843без авторизации · нужен клик≤ 1.5.1

  Database for Contact Form 7, WPforms, Elementor forms <= 1.5.1 - Unauthenticated Arbitrary File Deletion via CF7 File Field POST Value

  Высокий 8.1

• CVE-2024-3715без авторизации≤ 1.3.8

  Database for Contact Form 7, WPforms, Elementor forms <= 1.3.8 - Unauthenticated Stored Cross-Site Scripting

  Высокий 7.2

• CVE-2024-1069админ≤ 1.3.2

  Contact Form Entries <= 1.3.2 - Authenticated (Administrator+) Arbitrary File Upload

  Высокий 7.2

• CVE-2026-57708без авторизации · нужен клик≤ 1.5.2

  WordPress Contact Form Entries plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2026-9145без авторизации≤ 1.5.1

  Database for Contact Form 7, WPforms, Elementor forms <= 1.5.1 - Unauthenticated Arbitrary File Copy/Upload via Elementor Pro Form Upload Field 'raw_value'

  Средний 6.5

• CVE-2024-2030участник+≤ 1.3.3

  Database for Contact Form 7, WPforms, Elementor forms <= 1.3.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode

  Средний 6.4

• CVE-2023-33311участник+≤ 1.3.0

  WordPress Contact Form Entries Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)

  Средний 5.4

• CVE-2026-0825без авторизации≤ 1.4.5

  Database for Contact Form 7, WPforms, Elementor forms <= 1.4.5 - Missing Authorization to Unauthenticated Form Data Exfiltration via CSV Export

  Средний 5.3

• CVE-2026-3831участник+≤ 1.4.9

  Database for Contact Form 7, WPforms, Elementor forms <= 1.4.9 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Short

  Средний 4.3