Zealousweb vulnerabilities

Products

• Generate Pdf Using Contact Form 7 4
• Accept Paypal Payments Using Contact Form 7 3
• Abandoned Contact Form 7 2
• Accept Authorize.net Payments Using Contact Form 7 2
• Generate Pdf Using Contact Form 7 2
• Track Geolocation Of Users Using Contact Form 7 2

Newest

• unknown accept paypal payments using contact form 7 Accept PayPal Payments Using Contact Form 7 < 4.0.7 - Unauthenticated PII Disclosure via CSV Export CVE-2026-105990 5.3 MediumOctober 10, 2026
• unknown accept paypal payments using contact form 7 Accept PayPal Payments using Contact Form 7 < 4.0.7 - Unauthenticated Transaction Status Forgery CVE-2026-105989 5.3 MediumOctober 10, 2026
• unknown generate pdf using contact form 7 WordPress Generate PDF using Contact Form 7 plugin <= 4.2.1 - Arbitrary File Download vulnerability CVE-2026-94666 7.5 HighOctober 9, 2026
• zealousweb track geolocation of users using contact form 7 WordPress Track Geolocation Of Users Using Contact Form 7 plugin <= 3.0.2 - Sensitive Data Exposure vulnerability CVE-2026-73386 7.5 HighAugust 19, 2026
• zealopensource abandoned contact form 7 Abandoned Contact Form 7 <= 2.2 - Missing Authorization to Unauthenticated Arbitrary Post Deletion via 'recover_id' Parameter CVE-2026-9187 5.3 MediumJune 16, 2026
• zealousweb accept paypal payments using contact form 7 WordPress Accept PayPal Payments using Contact Form 7 plugin <= 4.0.4 - Broken Access Control vulnerability CVE-2026-39707 5.3 MediumApril 8, 2026
• zealousweb accept authorize.net payments using contact form 7 WordPress Accept Authorize.NET Payments Using Contact Form 7 plugin <= 2.5 - Sensitive Data Exposure Vulnerability CVE-2025-53322 5.3 MediumJune 27, 2025
• zealopensource accept stripe payments using contact form 7 WordPress Accept Stripe Payments Using Contact Form 7 plugin <= 3.0 - Sensitive Data Exposure Vulnerability CVE-2025-53309 5.3 MediumJune 27, 2025
• zealousweb abandoned contact form 7 WordPress Abandoned Contact Form 7 plugin <= 2.2 - Broken Access Control vulnerability CVE-2025-52817 8.2 HighJune 27, 2025
• zealopensource user registration using contact form 7 WordPress User Registration Using Contact Form 7 plugin <= 2.4 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-32679 5.4 MediumApril 9, 2025
• zealopensource accept authorize.net payments using contact form 7 Accept Authorize.NET Payments Using Contact Form 7 <= 2.2 - Unauthenticated Information Exposure CVE-2024-12250 5.3 MediumDecember 18, 2024
• zealopensource accept stripe payments using contact form 7 Accept Stripe Payments Using Contact Form 7 <= 2.5 - Unauthenticated Information Exposure CVE-2024-12255 5.3 MediumDecember 12, 2024
• unknown generate pdf using contact form 7 Generate PDF using Contact Form 7 <= 4.1.2 - Cross-Site Request Forgery to Arbitrary File Deletion CVE-2024-6317 8.8 HighJuly 9, 2024
• unknown generate pdf using contact form 7 Generate PDF using Contact Form 7 <= 4.1.2 - Cross-Site Request Forgery to Arbitrary File Upload CVE-2024-6316 8.8 HighJuly 9, 2024
• unknown generate pdf using contact form 7 WordPress Generate PDF using Contact Form 7 plugin <= 4.1.2 - CSRF to Arbitrary File Upload vulnerability CVE-2024-37555 9.6 CriticalJuly 9, 2024
• zealousweb track geolocation of users using contact form 7 WordPress Track Geolocation Of Users Using Contact Form 7 Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS) CVE-2023-49188 5.9 MediumDecember 15, 2023
• unknown generate pdf using contact form 7 Generate PDF using Contact Form 7 < 3.6 - Admin+ Stored Cross-Site Scripting CVE-2022-3070 4.8 MediumSeptember 26, 2022