Skip to content

Sevenspark vulnerabilities

Products

Newest

sevenspark contact form 7 – dynamic text extension WordPress Contact Form 7 – Dynamic Text Extension plugin <= 5.0.7 - Sensitive Data Exposure vulnerability CVE-2026-62043 7.5 HighOctober 10, 2026
sevenspark dtx – dynamic text extension for contact form 7 Contact Form 7 – Dynamic Text Extension <= 5.0.5 - Authenticated (Editor+) Stored Cross-Site Scripting CVE-2026-5116 4.4 MediumAugust 5, 2026
sevenspark dtx – dynamic text extension for contact form 7 Contact Form 7 – Dynamic Text Extension <= 5.0.7 - Unauthenticated Arbitrary Shortcode Execution CVE-2025-13146 6.5 MediumJuly 22, 2026
sevenspark contact form 7 – dynamic text extension WordPress Contact Form 7 Dynamic Text Extension plugin <= 5.0.5 - Content Injection vulnerability CVE-2025-63068 5.3 MediumDecember 9, 2025
sevenspark shiftnav – responsive mobile menu WordPress ShiftNav – Responsive Mobile Menu plugin <= 1.8 - Cross Site Scripting (XSS) Vulnerability CVE-2025-49243 6.5 MediumJune 6, 2025
sevenspark bellows accordion menu WordPress Bellows Accordion Menu plugin <= 1.4.3 - Cross Site Scripting (XSS) Vulnerability CVE-2025-49242 6.5 MediumJune 6, 2025
sevenspark contact form 7 – dynamic text extension WordPress Contact Form 7 - Dynamic Text Extension plugin <= 5.0.1 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-56218 4.3 MediumDecember 31, 2024
sevenspark contact form 7 – dynamic text extension, contact form 7 - dynamic text extension +1 more Contact Form 7 – Dynamic Text Extension <= 4.5 - Information Disclosure via Shortcode CVE-2024-10084 4.3 MediumNovember 5, 2024
sevenspark ubermenu UberMenu <= 3.8.3 - Cross-Site Request Forgery to Settings Reset CVE-2024-3593 7.2 HighJune 22, 2024
sevenspark ubermenu Uber Menu <= 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes CVE-2024-4710 6.4 MediumMay 21, 2024
rocklobster contact form 7, sevenspark contact form 7 – dynamic text extension +1 more Contact Form 7 – Dynamic Text Extension <= 4.1.0 - Insecure Direct Object Reference CVE-2023-6630 4.3 MediumJanuary 11, 2024
sevenspark bellows accordion menu Bellows Accordion Menu <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-5164 6.4 MediumOctober 30, 2023
menu swapper project swapper, sevenspark menu swapper +1 more Menu Swapper <= 1.1.0.2 - Cross-Site Request Forgery Bypass CVE-2020-36746 4.3 MediumJuly 1, 2023
sevenspark shiftnav ShiftNav – Responsive Mobile Menu < 1.7.2 - Contributor+ Stored XSS in Shortcode CVE-2022-4627 5.4 MediumJanuary 23, 2023