Advanced Contact Form 7 Db
Approved changes feed: RSS · Atom
cpe:2.3:a:vsourz1td:advanced_contact_form_7_db:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Vsourz1Td (ae7ed0a8-654a-57f6-bcfa-cf2077ca76aa) |
|---|---|
| Product | Advanced Contact Form 7 Db (0ba5fd0d-1ee0-543b-bc39-20f2d1a64dee) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-6831 |
vulnerable | 2026-10-13 12:29:53.812541 |
Advanced Contact form 7 DB <= 2.1.1 - Missing Authorization to Authenticated (Contributor+) Information Disclosure via 'acf7db' Shortcode
MEDIUM (6.5)
The Advanced Contact form 7 DB plugin for WordPress is vulnerable to missing authorization in all versions up to, and including, 2.0.9. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with Contributor-level access and above, to read all Contact Form 7 submission data via the 'acf7db' shortcode.
Published: 2026-09-23T06:42:04.948Z
Updated: 2026-09-23T14:13:20.506Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-18594 |
vulnerable | 2026-09-16 04:34:01.926319 |
Advanced Contact form 7 DB <= 2.1.3 - Missing Authorization to Authenticated (Custom+) Unauthorized Data Import via 'import_cf7_id'
MEDIUM (4.3)
The Advanced Contact form 7 DB plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.3. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with custom-level access and above, to import forged CSV submission records into any Contact Form 7 form managed by the plugin.
Published: 2026-09-10T03:40:41.068Z
Updated: 2026-09-10T13:36:45.915Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0814 |
vulnerable | 2026-06-08 07:47:13.233053 |
Advanced CF7 DB <= 2.0.9 - Missing Authorization to Authenticated (Subscriber+) Form Submissions Excel Export
MEDIUM (4.3)
The Advanced Contact form 7 DB plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'vsz_cf7_export_to_excel' function in all versions up to, and including, 2.0.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to export form submissions to excel file.
Published: 2026-04-08T17:25:52.159Z
Updated: 2026-04-08T18:36:26.257Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0811 |
vulnerable | 2026-06-08 07:47:13.229826 |
Advanced CF7 DB <= 2.0.9 - Cross-Site Request Forgery to Form Entry Deletion
MEDIUM (5.4)
The Advanced Contact form 7 DB plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.9. This is due to missing or incorrect nonce validation on the 'vsz_cf7_save_setting_callback' function. This makes it possible for unauthenticated attackers to delete form entry via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Published: 2026-04-08T17:25:52.629Z
Updated: 2026-04-08T19:10:25.260Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4319 |
vulnerable | 2026-06-08 06:50:17.502228 |
Advanced Contact form 7 DB <= 2.0.2 - Missing Authorization to Unauthenticated Information Disclosure
MEDIUM (5.3)
The Advanced Contact form 7 DB plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'vsz_cf7_export_to_excel' function in versions up to, and including, 2.0.2. This makes it possible for unauthenticated attackers to download the entry data for submitted forms.
Published: 2024-06-11T05:33:40.185Z
Updated: 2026-04-08T16:43:54.379Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3723 |
vulnerable | 2026-06-08 06:43:51.294410 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.