Extensions For Cf7 vulnerabilities | LiveThreat CVE Feed

Product

Extensions For Cf7

by Hasthemes · last CVE Jan 24, 2025

CVEs

On KEV

6.1

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 3Low 0

Severity

Exploitation

Watch

Add Extensions For Cf7 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-29102	6.1	0%	Mar 19	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes Extensions For CF7 allows Stored XSS.This issue affects Extensions… Affected: before 3.0.7
CVE-2025-24695	4.4	0%	Jan 24	WordPress Extensions For CF7 Plugin <= 3.2.0 - Server Side Request Forgery (SSRF) vulnerability Affected: before 3.2.1
CVE-2023-23899	4.3	0%	Feb 17	Cross-Site Request Forgery (CSRF) vulnerability in HasThemes Extensions For CF7 plugin <= 2.0.8 versions leads to arbitrary plugin activation Affected: before 2.0.9