What’s Vulnerable › Products
arshidkv12 Database Addon for Contact Form 7 – CFDB7 vulnerabilities
6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.
Check whether your arshidkv12 Database Addon for Contact Form 7 – CFDB7 version is affected
Latest arshidkv12 Database Addon for Contact Form 7 – CFDB7 vulnerabilities
- CVE-2026-107652 — Database Addon for Contact Form 7 <= 1.4.1 - Unauthenticated Limited File Deletion via Injected 'attackcfdb7_file' Submission Field (CVSS 5.3)
- CVE-2025-6740 — Contact Form 7 Database Addon <= 1.3.1 - Unauthenticated Stored Cross-Site Scripting via tmpD Parameter (CVSS 6.1)
- CVE-2022-3634 — Contact Form 7 Database Addon < 1.2.6.5 - CSV Injection (CVSS 9.8)
- CVE-2021-36886 — WordPress Contact Form 7 Database Addon – CFDB7 plugin <= 1.2.5.9 - Cross-Site Request Forgery (CSRF) vulnerability (CVSS 8.8)
- CVE-2021-36885 — WordPress Contact Form 7 Database Addon – CFDB7 plugin <= 1.2.6.1 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability (CVSS 6.1)
- CVE-2021-24144 — Contact Form 7 Database Addon < 1.2.5.6 - CSV Injection (CVSS 7.8)