Extension WordPress
Vulnérabilités Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection)
Cette page rassemble les failles publiées pour Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection), leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection)
5 fiches
Extensions For CF7 <= 3.4.0 – Authenticated (Contributor+) Insecure Direct Object Reference
The Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.4.0 due to missing validation on a user controlled…
*-3.4.0
3.4.1
23/01/2026
Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) <= 3.2.8 – Unauthenticated Arbitrary File Deletion Triggered via Admin Form Submission Deletion
The Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'delete-file' field in all versions up to, and including,…
*-3.2.8
3.2.9
21/07/2025
Extensions For CF7 <= 3.2.0 – Authenticated (Admin+) Sever-Side Request Forgery
The Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.2.0. This makes it possible for authenticated attackers, with Administrator-level…
*-3.2.0
3.2.1
24/01/2025
Extensions For CF7 <= 3.0.6 – Unauthenticated Stored Cross-Site Scripting
The Extensions For CF7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.0.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary…
*-3.0.6
3.0.7
15/03/2024
Extensions For CF7 <= 2.0.8 – Cross-Site Request Forgery
The Extensions For CF7 plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.8. This is due to missing or incorrect nonce validation on the mailchimp_map function. This makes it possible for…
*-2.0.8
2.0.9
20/01/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.