DF
Product
Database for Contact Form 7, WPforms, Elementor forms
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 4Medium 5Low 0
Watch
Add Database for Contact Form 7, WPforms, Elementor forms to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-9145 | 6.5 | Jul 2 | Database for Contact Form 7, WPforms, Elementor forms <= 1.5.1 - Unauthenticated Arbitrary File Copy/Upload via Elementor Pro Form Upload Field 'raw_value' Affected: through 1.5.1 |
| CVE-2024-2030 | 6.4 | Mar 13 | Database for Contact Form 7, WPforms, Elementor forms <= 1.3.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode Affected: through 1.3.3 |
| CVE-2023-31095 | 6.1 | Dec 29 | WordPress Integration for Contact Form 7 HubSpot Plugin <= 1.2.8 is vulnerable to Open Redirection Affected: before 1.2.9 |
| CVE-2026-0825 | 5.3 | Jan 28 | Database for Contact Form 7, WPforms, Elementor forms <= 1.4.5 - Missing Authorization to Unauthenticated Form Data Exfiltration via CSV Export Affected: through 1.4.5 |
| CVE-2026-3831 | 4.3 | Apr 1 | Database for Contact Form 7, WPforms, Elementor forms <= 1.4.9 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Shortcode Affected: through 1.4.9 |
Showing 5