What’s Vulnerable › Products

rocklobsterinc Contact Form 7 vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your rocklobsterinc Contact Form 7 version is affected

Latest rocklobsterinc Contact Form 7 vulnerabilities

• CVE-2026-14236 — Contact Form 7 – PayPal & Stripe Add-on < 2.5 - Open Redirect (CVSS 4.7)
• CVE-2025-3247 — Contact Form 7 <= 6.0.5 - Order Replay Vulnerability (CVSS 5.3)
• CVE-2024-4704 — Contact Form 7 < 5.9.5 - Unauthenticated Open Redirect (CVSS 6.1)
• CVE-2024-2242 — Contact Form 7 <= 5.9 - Reflected Cross-Site Scripting (CVSS 6.1)
• CVE-2023-6630 — Contact Form 7 – Dynamic Text Extension <= 4.1.0 - Insecure Direct Object Reference (CVSS 4.3)
• CVE-2023-6449 — Contact Form 7 <= 5.8.3 - Authenticated (Editor+) Arbitrary File Upload (CVSS 7.2)
• CVE-2021-24159 — Contact Form 7 Style <= 3.1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting (CVSS 8.8)
• CVE-2020-35489 — (CVSS 10.0)
• CVE-2018-20979 — (CVSS 9.8)
• CVE-2014-2265 — (CVSS 5.0)