Skip to contentRocklobster Contact Form 7 vulnerabilities
- rocklobster contact form 7Contact Form 7 <= 6.0.5 - Order Replay VulnerabilityCVE-2025-32475.3 Medium
- rocklobster contact form 7Contact Form 7 < 5.9.5 - Unauthenticated Open RedirectCVE-2024-47046.1 Medium
- rocklobster contact form 7Contact Form 7 <= 5.9 - Reflected Cross-Site ScriptingCVE-2024-2242Public exploit6.1 Medium
- rocklobster contact form 7, sevenspark contact form 7 – dynamic text extension +1 moreContact Form 7 – Dynamic Text Extension <= 4.1.0 - Insecure Direct Object ReferenceCVE-2023-66304.3 Medium
- rocklobster contact form 7Contact Form 7 <= 5.8.3 - Authenticated (Editor+) Arbitrary File UploadCVE-2023-64496.6 Medium
- aiyaz, maheshpatel contact form 7 custom validationWordPress Contact form 7 Custom validation Plugin <= 1.1.3 is vulnerable to SQL InjectionCVE-2023-406098.2 High
- ionuticlanzan contact form 7 style, rocklobster contact form 7 +1 moreContact Form 7 Style <= 3.1.9 - Cross-Site Request Forgery to Stored Cross-Site ScriptingCVE-2021-241598.8 High
- rocklobster contact form 7The contact-form-7 (aka Contact Form 7) plugin before 5.3.2 for WordPress allows Unrestricted...CVE-2020-35489Public exploitEPSS 89.3%10.0 Critical
- rocklobster contact form 7The contact-form-7 plugin before 5.0.4 for WordPress has privilege escalation because of...CVE-2018-209799.8 Critical
- rocklobster contact form 7Rock Lobster Contact Form 7 before 3.7.2 allows remote attackers to bypass the CAPTCHA protection...CVE-2014-22655.0 Medium