What’s Vulnerable › Products

Generate PDF using Contact Form 7 vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Generate PDF using Contact Form 7 version is affected

Latest Generate PDF using Contact Form 7 vulnerabilities

• CVE-2026-94666 — WordPress Generate PDF using Contact Form 7 plugin <= 4.2.1 - Arbitrary File Download vulnerability (CVSS 7.5)
• CVE-2026-90984 — Generate PDF using Contact Form 7 < 4.2.2 - Unauthenticated Server-Side Request Forgery via Array-Valued Form Field (CVSS 5.8)
• CVE-2024-6317 — Generate PDF using Contact Form 7 <= 4.1.2 - Cross-Site Request Forgery to Arbitrary File Deletion (CVSS 8.8)
• CVE-2024-6316 — Generate PDF using Contact Form 7 <= 4.1.2 - Cross-Site Request Forgery to Arbitrary File Upload (CVSS 8.8)
• CVE-2024-37555 — WordPress Generate PDF using Contact Form 7 plugin <= 4.1.2 - CSRF to Arbitrary File Upload vulnerability (CVSS 9.8)
• CVE-2022-3070 — Generate PDF using Contact Form 7 < 3.6 - Admin+ Stored Cross-Site Scripting (CVSS 4.8)