Approved changes feed: RSS · Atom

cpe:2.3:a:ht_plugins:ht_contact_form_7:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHt Plugins (069650e6-70e8-59a2-afe8-116c61431ac0)
ProductHt Contact Form 7 (7b4559b2-2db7-5d54-8c96-bfda289d1b54)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-42728 vulnerable 2026-06-08 08:03:16.606532 WordPress HT Contact Form 7 plugin <= 2.8.2 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HT Plugins HT Contact Form 7 ht-contactform allows Stored XSS.This issue affects HT Contact Form 7: from n/a through <= 2.8.2.
Published: 2026-05-27T09:49:04.347Z
Updated: 2026-05-27T10:52:52.098Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54015 vulnerable 2026-06-08 07:33:10.982757 WordPress HT Contact Form 7 plugin <= 2.0.0 - Local File Inclusion Vulnerability
MEDIUM (6.6)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in HT Plugins HT Contact Form 7 ht-contactform allows PHP Local File Inclusion.This issue affects HT Contact Form 7: from n/a through <= 2.0.0.
Published: 2025-07-16T10:36:42.762Z
Updated: 2026-04-28T16:13:28.497Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24726 vulnerable 2026-06-08 07:12:49.791959 WordPress Contact Form 7 Widget plugin <= 1.2.1 - Stored Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HT Plugins HT Contact Form 7 ht-contactform allows Stored XSS.This issue affects HT Contact Form 7: from n/a through <= 1.2.1.
Published: 2025-01-24T17:25:16.721Z
Updated: 2026-04-28T16:11:33.445Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.