Database for Contact Form 7, WPforms, Elementor forms

Güvenlik açıkları

• CVE-2026-2599kimlik doğrulamasız≤ 1.4.7

  Database for Contact Form 7, WPforms, Elementor forms <= 1.4.7 - Unauthenticated PHP Object Injection via 'download_csv'

  Kritik 9.8

• CVE-2025-7384kimlik doğrulamasız≤ 1.4.3

  Database for Contact Form 7, WPforms, Elementor forms <= 1.4.3 - Unauthenticated PHP Object Injection to Arbitrary File Deletion

  Kritik 9.8

• CVE-2023-31212giriş gerekir≤ 1.3.0

  WordPress Contact Form Entries Plugin <= 1.3.0 is vulnerable to SQL Injection

  Kritik 9.8

• CVE-2026-9843kimlik doğrulamasız · tıklama gerekir≤ 1.5.1

  Database for Contact Form 7, WPforms, Elementor forms <= 1.5.1 - Unauthenticated Arbitrary File Deletion via CF7 File Field POST Value

  Yüksek 8.1

• CVE-2024-3715kimlik doğrulamasız≤ 1.3.8

  Database for Contact Form 7, WPforms, Elementor forms <= 1.3.8 - Unauthenticated Stored Cross-Site Scripting

  Yüksek 7.2

• CVE-2024-1069yönetici≤ 1.3.2

  Contact Form Entries <= 1.3.2 - Authenticated (Administrator+) Arbitrary File Upload

  Yüksek 7.2

• CVE-2026-57708kimlik doğrulamasız · tıklama gerekir≤ 1.5.2

  WordPress Contact Form Entries plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2026-9145kimlik doğrulamasız≤ 1.5.1

  Database for Contact Form 7, WPforms, Elementor forms <= 1.5.1 - Unauthenticated Arbitrary File Copy/Upload via Elementor Pro Form Upload Field 'raw_value'

  Orta 6.5

• CVE-2024-2030katılımcı+≤ 1.3.3

  Database for Contact Form 7, WPforms, Elementor forms <= 1.3.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode

  Orta 6.4

• CVE-2023-33311katılımcı+≤ 1.3.0

  WordPress Contact Form Entries Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)

  Orta 5.4

• CVE-2026-0825kimlik doğrulamasız≤ 1.4.5

  Database for Contact Form 7, WPforms, Elementor forms <= 1.4.5 - Missing Authorization to Unauthenticated Form Data Exfiltration via CSV Export

  Orta 5.3

• CVE-2026-3831katılımcı+≤ 1.4.9

  Database for Contact Form 7, WPforms, Elementor forms <= 1.4.9 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Short

  Orta 4.3