Contact Form 7 Database Addon
Approved changes feed: RSS · Atom
cpe:2.3:a:ciphercoin:contact_form_7_database_addon:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Ciphercoin (5147eacb-23b6-51e8-9a5b-c6952c28237f) |
|---|---|
| Product | Contact Form 7 Database Addon (0bc4ed50-95d8-5c6a-9d18-fe4f0634c1b9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/arshidkv12/contact-form-cfdb7 |
purl2cpe | 2026-06-01 10:12:11.276822 |
pkg:github/hoaitt/contact-form-cfdb7 |
purl2cpe | 2026-06-01 10:12:11.276824 |
pkg:github/wpplugins/contact-form-cfdb7 |
purl2cpe | 2026-06-01 10:12:11.276825 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-6740 |
vulnerable | 2026-06-08 07:43:16.171557 |
Contact Form 7 Database Addon <= 1.3.1 - Unauthenticated Stored Cross-Site Scripting via tmpD Parameter
MEDIUM (6.1)
The Contact Form 7 Database Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tmpD’ parameter in all versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2025-07-04T11:18:24.720Z
Updated: 2026-04-08T16:32:27.651Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3634 |
vulnerable | 2026-06-08 05:48:21.582194 |
Contact Form 7 Database Addon < 1.2.6.5 - CSV Injection
The Contact Form 7 Database Addon WordPress plugin before 1.2.6.5 does not validate data when output it back in a CSV file, which could lead to CSV injection
Published: 2022-11-21T00:00:00.000Z
Updated: 2025-04-29T16:26:11.192Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36886 |
vulnerable | 2026-06-08 05:32:52.662094 |
WordPress Contact Form 7 Database Addon – CFDB7 plugin <= 1.2.5.9 - Cross-Site Request Forgery (CSRF) vulnerability
MEDIUM (6.5)
Cross-Site Request Forgery (CSRF) vulnerability discovered in Contact Form 7 Database Addon – CFDB7 WordPress plugin (versions <= 1.2.5.9).
Published: 2021-12-22T18:06:46.962Z
Updated: 2026-04-28T16:07:36.176Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36885 |
vulnerable | 2026-06-08 05:32:52.661390 |
WordPress Contact Form 7 Database Addon – CFDB7 plugin <= 1.2.6.1 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability
MEDIUM (6.1)
Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability discovered in Contact Form 7 Database Addon – CFDB7 WordPress plugin (versions <= 1.2.6.1).
Published: 2021-12-22T18:06:38.778Z
Updated: 2026-04-28T16:07:36.171Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24144 |
vulnerable | 2026-06-08 05:30:03.855663 |
Contact Form 7 Database Addon < 1.2.5.6 - CSV Injection
Unvalidated input in the Contact Form 7 Database Addon plugin, versions before 1.2.5.6, was prone to a vulnerability that lets remote attackers inject arbitrary formulas into CSV files.
Published: 2021-03-18T14:57:50.000Z
Updated: 2024-08-03T19:21:18.287Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.