HT Contact Form 7 vulnerabilities | LiveThreat CVE Feed

Product

HT Contact Form 7

by HT Plugins · last CVE May 27, 2026

CVEs

On KEV

7.1

Max CVSS

New 30D

Severity mix

Critical 0High 1Medium 2Low 0

Severity

Exploitation

Watch

Add HT Contact Form 7 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-42728	7.1	0%	May 27	WordPress HT Contact Form 7 plugin <= 2.8.2 - Cross Site Scripting (XSS) vulnerability Affected: through 2.8.2
CVE-2025-54015	6.6	1%	Jul 16	WordPress HT Contact Form 7 plugin <= 2.0.0 - Local File Inclusion Vulnerability Affected: through 2.0.0
CVE-2025-24726	6.5	0%	Jan 24	WordPress Contact Form 7 Widget plugin <= 1.2.1 - Stored Cross Site Scripting (XSS) vulnerability Affected: through 1.2.1