Zealopensource vulnerabilities

Products

• Accept Stripe Payments Using Contact Form 7 3
• Generate Pdf Using Contact Form 7 2
• Smart Appointment & Booking 2
• User Registration Using Contact Form 7 2

Newest

• zealopensource abandoned contact form 7 Abandoned Contact Form 7 <= 2.2 - Missing Authorization to Unauthenticated Arbitrary Post Deletion via 'recover_id' Parameter CVE-2026-9187 5.3 MediumJune 16, 2026
• zealopensource smart appointment & booking Smart Appointment & Booking <= 1.0.8 - Missing Authorization to Unauthenticated Arbitrary Booking Cancellation CVE-2026-5693 5.3 MediumMay 12, 2026
• zealopensource smart appointment & booking Smart Appointment & Booking <= 1.0.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via saab_save_form_data AJAX Action CVE-2026-0742 6.4 MediumFebruary 4, 2026
• zealopensource user registration using contact form 7 User Registration Using Contact Form 7 <= 2.5 - Authenticated (Subscriber+) Information Exposure CVE-2025-12825 5.3 MediumJanuary 17, 2026
• zealopensource accept stripe payments using contact form 7 Accept Stripe Payments Using Contact Form 7 <= 3.1 - Reflected Cross-Site Scripting via failure_message CVE-2025-12834 6.1 MediumDecember 12, 2025
• zealopensource accept stripe payments using contact form 7 WordPress Accept Stripe Payments Using Contact Form 7 plugin <= 3.0 - Sensitive Data Exposure Vulnerability CVE-2025-53309 5.3 MediumJune 27, 2025
• zealopensource user registration using contact form 7 WordPress User Registration Using Contact Form 7 plugin <= 2.4 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-32679 5.4 MediumApril 9, 2025
• zealopensource accept sagepay payments using contact form 7 Accept SagePay Payments Using Contact Form 7 <= 2.0 - Unauthenticated Information Exposure CVE-2025-2883 5.3 MediumApril 8, 2025
• zealopensource accept authorize.net payments using contact form 7 Accept Authorize.NET Payments Using Contact Form 7 <= 2.2 - Unauthenticated Information Exposure CVE-2024-12250 5.3 MediumDecember 18, 2024
• zealopensource accept stripe payments using contact form 7 Accept Stripe Payments Using Contact Form 7 <= 2.5 - Unauthenticated Information Exposure CVE-2024-12255 5.3 MediumDecember 12, 2024
• unknown generate pdf using contact form 7 Generate PDF using Contact Form 7 <= 4.1.2 - Cross-Site Request Forgery to Arbitrary File Deletion CVE-2024-6317 8.8 HighJuly 9, 2024
• unknown generate pdf using contact form 7 Generate PDF using Contact Form 7 <= 4.1.2 - Cross-Site Request Forgery to Arbitrary File Upload CVE-2024-6316 8.8 HighJuly 9, 2024