sevenspark has 2 CVEs on record. 1 was published in the last 90 days. The median CVSS is 7.0 (high).
CVEs per month
Last 12 months, by publish date
1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.0
- Publish → KEV
- —
- Last 90 days
- 1 prev 1
Products
- DTX – Dynamic Text Extension for Contact Form 7 1
- contact-form-7-dynamic-text-extension 1
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
CVE-2026-62043High· 7.5Unauthenticated Sensitive Data Exposure in Contact Form 7 – Dynamic Text Extension <= 5.0.7 versions.41CVE-2025-13146Medium· 6.5The The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.0.736
sevenspark vulnerabilities
CVEs affecting sevenspark, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-62043High· 7.5Unauthenticated Sensitive Data Exposure in Contact Form 7 – Dynamic Text Extension <= 5.0.7 versions.
Unauthenticated Sensitive Data Exposure in Contact Form 7 – Dynamic Text Extension <= 5.0.7 versions.
▾ Twilightsevenspark · contact-form-7-dynamic-text-extensionEPSS 0.30%via NVD
CVE-2025-13146Medium· 6.5The The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.0.7
The The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.0.7. This is due to the software allowing users to execute an action that does no…
▾ Sunlitsevenspark · DTX – Dynamic Text Extension for Contact Form 7EPSS 0.47%via NVD