Wpcrm Crm For Contact Form Cf7 & Woocommerce

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:mojoomla:wpcrm_-_crm_for_contact_form_cf7_&_woocommerce:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMojoomla (723d8d71-8722-5481-8521-63e781b12f90)
ProductWpcrm Crm For Contact Form Cf7 & Woocommerce (2d8480e0-9ba7-5d60-b246-114914db6018)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-24774 vulnerable 2026-06-08 07:12:49.872613 WordPress WPCRM - CRM for Contact form CF7 & WooCommerce plugin <= 3.2.0 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mojoomla WPCRM - CRM for Contact form CF7 & WooCommerce wpcrm allows Reflected XSS.This issue affects WPCRM - CRM for Contact form CF7 & WooCommerce: from n/a through <= 3.2.0.
Published: 2025-06-27T11:52:47.385Z
Updated: 2026-04-28T16:11:34.590Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24773 vulnerable 2026-06-08 07:12:49.872307 WordPress WPCRM - CRM for Contact form CF7 & WooCommerce plugin <= 3.2.0 - SQL Injection Vulnerability
CRITICAL (9.3)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla WPCRM - CRM for Contact form CF7 & WooCommerce wpcrm allows SQL Injection.This issue affects WPCRM - CRM for Contact form CF7 & WooCommerce: from n/a through <= 3.2.0.
Published: 2025-06-17T15:01:40.473Z
Updated: 2026-05-12T00:23:30.937Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.