database_addon_for_contact_form_7_cfdb7 vulnerabilities

CVEs whose affected-version data names the database_addon_for_contact_form_7_cfdb7 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-107652Medium· 5.3

2w ago

The Database Addon for Contact Form 7 – CFDB7 plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 1.4.1

The Database Addon for Contact Form 7 – CFDB7 plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 1.4.1. This is due to the plugin storing arbitrary (non-form-tag) submission fields in its db7_…

▾ Sunlitarshidkv12 · Database Addon for Contact Form 7 – CFDB7EPSS 0.31%via NVD