Login Request a demo
DF
Product
Database for Contact Form 7, WPforms, Elementor forms
by crmperks · last CVE Jul 2, 2026
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 3High 4Medium 5Low 0
Severity
All severities12Critical3High4Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Database for Contact Form 7, WPforms, Elementor forms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-2599
9.8
1%
Mar 5
Database for Contact Form 7, WPforms, Elementor forms <= 1.4.7 - Unauthenticated PHP Object Injection via 'download_csv'
Affected: through 1.4.7
CVE-2025-7384
9.8
1%
Aug 13
Database for Contact Form 7, WPforms, Elementor forms <= 1.4.3 - Unauthenticated PHP Object Injection to Arbitrary File Deletion
Affected: through 1.4.3
CVE-2023-31212
9.8
1%
Oct 31
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CRM Perks Database for Contact Form 7, WPforms, Elementor forms…
Affected: through 1.3.0
CVE-2026-9843
8.1
1%
Jun 20
Database for Contact Form 7, WPforms, Elementor forms <= 1.5.1 - Unauthenticated Arbitrary File Deletion via CF7 File Field POST Value
Affected: through 1.5.1
CVE-2022-3604
7.8
0%
Jan 16
Contact Form Entries < 1.3.0 - CSV Injection
Affected: before 1.3.0
CVE-2024-3715
7.2
1%
May 2
Database for Contact Form 7, WPforms, Elementor forms <= 1.3.8 - Unauthenticated Stored Cross-Site Scripting
Affected: through 1.3.8
CVE-2024-1069
7.2
1%
Jan 31
Contact Form Entries <= 1.3.2 - Authenticated (Administrator+) Arbitrary File Upload
Affected: through 1.3.2
CVE-2026-9145
6.5
0%
Jul 2
Database for Contact Form 7, WPforms, Elementor forms <= 1.5.1 - Unauthenticated Arbitrary File Copy/Upload via Elementor Pro Form Upload Field 'raw_value'
Affected: through 1.5.1
CVE-2024-2030
6.4
1%
Mar 13
Database for Contact Form 7, WPforms, Elementor forms <= 1.3.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
Affected: through 1.3.3
CVE-2023-31095
6.1
0%
Dec 29
WordPress Integration for Contact Form 7 HubSpot Plugin <= 1.2.8 is vulnerable to Open Redirection
Affected: before 1.2.9
CVE-2026-0825
5.3
0%
Jan 28
Database for Contact Form 7, WPforms, Elementor forms <= 1.4.5 - Missing Authorization to Unauthenticated Form Data Exfiltration via CSV Export
Affected: through 1.4.5
CVE-2026-3831
4.3
0%
Apr 1
Database for Contact Form 7, WPforms, Elementor forms <= 1.4.9 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Shortcode
Affected: through 1.4.9
Showing 12