What’s Vulnerable › Products

zealopensource Abandoned Contact Form 7 vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your zealopensource Abandoned Contact Form 7 version is affected

Latest zealopensource Abandoned Contact Form 7 vulnerabilities

• CVE-2026-9187 — Abandoned Contact Form 7 <= 2.2 - Missing Authorization to Unauthenticated Arbitrary Post Deletion via 'recover_id' Parameter (CVSS 5.3)
• CVE-2025-52817 — WordPress Abandoned Contact Form 7 plugin <= 2.2 - Broken Access Control vulnerability (CVSS 8.2)